Pentesting Tools
Athena hacking tool surface mainly leverages on Athena and Nixpkgs repositories.
Athena OS retrieves all the pentesting tools through BlackArch repository. Its repository contains 2800+ tools, classified for categories. You can install tools individually or in groups according to the categories they belong.
Nixpkgs repository is the official Nix repository containing all the pentesting tools deployed by the community for Nix-based systems.
Hacking tools can be installed and used in several ways by:
- Single tools
- Cyber Security roles
- Red Team menu
- Categories
Single tools
Section titled “Single tools”For installing a single tool, in Athena Arch you can simply run sudo pacman -S <tool-name> while in Athena Nix you can simply declare it inside /etc/nixos/configuration.nix or run it in an ephimeral environment by nix-shell -p <tool-name>.
Cyber Security roles
Section titled “Cyber Security roles”Cyber Security roles allow to install hacking tools according to a specific role. Each one of these roles is linked to a package that is installed according to the following table:
| Role | Command |
|---|---|
| 💙 Blue Teamer 💙 | cyber-toolkit blue |
| 🐞 Bug Bounty Hunter 🐞 | cyber-toolkit bountyhunter |
| 🍘 Cracker Specialist 🍘 | cyber-toolkit cracker |
| 💀 DoS Tester 💀 | cyber-toolkit dos |
| 🎓 Enthusiast Student 🎓 | cyber-toolkit student |
| 🔍 Forensic Analyst 🔍 | cyber-toolkit forensic |
| 🦠 Malware Analyst 🦠 | cyber-toolkit malware |
| 📱 Mobile Analyst 📱 | cyber-toolkit mobile |
| 🌐 Network Analyst 🌐 | cyber-toolkit network |
| 🕵️ OSINT Specialist 🕵️ | cyber-toolkit osint |
| ❤️ Red Teamer ❤️ | cyber-toolkit red |
| 🕸️ Web Pentester 🕸️ | cyber-toolkit web |
At first run, it generates roles files in ~/.config/cyber-toolkit/roles. They contain the list of tools for each role. You can change their content in order to adapt these roles with your favourite tools. Before adding a tool package, be sure it exists in one of the distro repositories.
If you would like to reset the role files to their default values, just remove the tool directory in your home configuration path:
rm -rf ~/.config/cyber-toolkitand re-run it.
In Athena Nix, these roles are deployed by /etc/nixos/modules/cyber module and the user can customize it as desired.
Inside the role module files, the user can see what are the specific tools installed for each role.
You can set your Cyber Security role as described here.
In Athena Arch, you can set more than one role, Athena Welcome will keep the latest set role. During the download of packages for a role, in case the process is interrupted, don’t worry, you don’t need to download from scratch because the downloaded packages are temporarily saved in pacman cache.
In Athena Nix, to set more than one role, it is needed to manually edit /etc/nixos/configuration.nix and add a further line invoking the second role Nix module.
Red Team menu
Section titled “Red Team menu”Athena OS GNOME uses Red Team menu for accessing to the main hacking tools. It is better described in detail here.
Categories
Section titled “Categories”By using BlackArch repository, Athena Arch can install packages by cyber security categories deployed as package group that users can install by sudo pacman -S <category>:
| Category | Description |
|---|---|
| blackarch-anti-forensic | Countering forensic activities. |
| blackarch-automation | Workflow automation. |
| blackarch-automobile | Analyzing automotive applications. |
| blackarch-backdoor | Exploiting or open backdoors on already vulnerable systems. |
| blackarch-binary | Operating on binary in some form. |
| blackarch-bluetooth | Using Bluetooth attacks. |
| blackarch-code-audit | Auditing existing source code for vulnerability analysis. |
| blackarch-cracker | Cracking cryptographic functions. |
| blackarch-crypto | Working with cryptography, with the exception of cracking. |
| blackarch-database | Database exploitations on any level. |
| blackarch-debugger | Debugging resources in realtime. |
| blackarch-decompiler | Reversing a compiled program into source code. |
| blackarch-defensive | Protecting resources from malware and attacks. |
| blackarch-disassembler | Producing assembly output rather than the raw source code. |
| blackarch-dos | Using DoS (Denial of Service) attacks. |
| blackarch-drone | Managing physically engineered drones. |
| blackarch-exploitation | Taking advantages of exploits in other programs or services. |
| blackarch-fingerprint | Exploiting fingerprint biometric equipment. |
| blackarch-firmware | Exploiting vulnerabilities in firmware. |
| blackarch-forensic | Finding information on physical disks or embedded memory. |
| blackarch-fuzzer | Fuzzing tools. |
| blackarch-hardware | Exploiting or managing anything to do with physical hardware. |
| blackarch-honeypot | Acting as “honeypots”, i.e., programs that appear to be vulnerable services used to attract hackers into a trap. |
| blackarch-ids | Intrusion Detection System tools. |
| blackarch-keylogger | Recording and retaining keystrokes on a target system. |
| blackarch-malware | Malicious software or malware detection. |
| blackarch-misc | Miscellaneous tools. |
| blackarch-mobile | Manipulating mobile platforms. |
| blackarch-networking | Scanning selected systems for vulnerabilities or information about the network. |
| blackarch-nfc | NFC technology tools. |
| blackarch-packer | Operating on or involve packers. |
| blackarch-proxy | Acting as a proxy, i.e., redirecting traffic through another node on the internet. |
| blackarch-radio | Operating on radio frequency. |
| blackarch-recon | Actively seeking vulnerable exploits in the wild. |
| blackarch-reversing | Any decompiler, disassembler or any similar program. |
| blackarch-scanner | Scanning selected systems for vulnerabilities or information about the network. |
| blackarch-sniffer | Analyzing network traffic. |
| blackarch-social | Social engineering attacks. |
| blackarch-spoof | Spoofing attacker entity. |
| blackarch-stego | Analyzing resources for hidden information. |
| blackarch-tunnel | Tunneling network traffic on a given network. |
| blackarch-voip | Operating on VoIP programs and protocols. |
| blackarch-webapp | Web application attacks tools. |
| blackarch-windows | Native Windows packages. |
| blackarch-wireless | Operating on wireless networks on any level. |
Issues
Section titled “Issues”In Athena Nix, during the installation of a role, if you get an error that interrupts the process, detect what is the tool package is producing the error, edit /etc/nixos/modules/roles/<your-role>/default.nix and comment or delete the line containing the tool package name and reinstall the role.