Tool Installation Scripts - Simple Vulnerability Manager

Overview

SVM provides installation scripts for setting up security testing tools on both local Windows systems and remote Linux systems. These scripts automate the download, installation, and configuration of various security tools.

Scripts

Windows Local Installation

Script: install_upgrade_tools_local.bat Installs tools on Windows systems.

Linux Remote Installation

Scripts:

install_upgrade_tools_remoto.bat (Windows wrapper)
install_upgrade_tools_remoto.sh (Linux installation script)

Installs tools on remote Linux systems via SSH.

Supported Platforms

Linux
Windows

Kali Linux - Full support
Debian - Full support
Ubuntu - Full support
Windows 10 Ubuntu - WSL (Windows Subsystem for Linux)

Tool Categories

Web Scanning Tools

Arachni

Web application security scanner framework. Platforms: Linux (Kali, Debian, Ubuntu) Dependencies:

libsqlite3-dev
libpq-dev
postgresql-server-dev-10
default-libmysqlclient-dev
curl, libcurl3, libcurl4-openssl-dev

Ruby Gems:

watir-webdriver
watir
selenium-webdriver
arachni-reactor
arachni-rpc

Installation:

sudo ./install_upgrade_tools_remoto.sh Arachni

Information Gathering Tools

Recon-ng

OSINT reconnaissance framework. Platforms: Linux (Kali, Debian, Ubuntu) Dependencies:

dos2unix
libxml2-dev
libxslt1-dev
zlib1g-dev
Python packages (from REQUIREMENTS file)

Installation:

sudo ./install_upgrade_tools_remoto.sh Recon-ng

Repository:

git clone https://bitbucket.org/LaNMaSteR53/recon-ng
cd recon-ng
pip install -r REQUIREMENTS

EyeWitness

Web application screenshot and reconnaissance tool. Platforms: Linux (Kali, Debian, Ubuntu) Dependencies:

python-levenshtein
selenium==2.53.6 (specific version)

Installation:

sudo ./install_upgrade_tools_remoto.sh EyeWitness

Setup:

git clone https://github.com/ChrisTruncer/EyeWitness
cd EyeWitness/setup
./setup.sh

Service Scanning Tools

OpenVAS

Comprehensive vulnerability scanner. Platforms: Linux (Kali, Debian, Ubuntu) Core Dependencies:

sqlite3, xsltproc
texlive-latex-base
texlive-latex-extra
texlive-fonts-recommended
alien

Scanning Tools:

nmap
nikto
ike-scan
lsof
pnscan
netdiag
ldapscripts
dirmngr
hydra

Installation:

Kali Linux
Ubuntu/Debian

sudo ./install_upgrade_tools_remoto.sh OpenVAS

# Kali packages
apt-get install openvas openvas-manager openvas-manager-common \
  openvas-cli openvas-scanner libopenvas9 \
  greenbone-security-assistant greenbone-security-assistant-common

# Setup
openvas-setup

sudo ./install_upgrade_tools_remoto.sh OpenVAS

# Add PPA repository
add-apt-repository ppa:mrazavi/openvas
apt-get update

# Install packages
apt-get install openvas9
apt-get install greenbone-security-assistant9

Default Credentials:

Username: admin
Password: OpenVAS

Post-Installation: The script automatically configures remote access:

Detects server IP address
Updates Greenbone Security Assistant to listen on IP
Creates default admin user
Sets default password

OpenVAS Plugin Updates

Keep OpenVAS vulnerability definitions current.

sudo ./install_upgrade_tools_remoto.sh OpenVASPlugins

Updates:

greenbone-certdata-sync
greenbone-nvt-sync
greenbone-scapdata-sync
openvas-feed-update

Nessus Plugin Updates

Update Nessus vulnerability plugins. Platforms: Linux (where Nessus is installed)

sudo ./install_upgrade_tools_remoto.sh NessusPlugins

Command:

/opt/nessus/sbin/nessuscli update --plugins-only

Nmap

Network scanner and service detection tool. Platforms: Linux, Windows

Linux
Windows

sudo ./install_upgrade_tools_remoto.sh Nmap

# Installs Nmap and updates script database
apt-get install nmap
nmap --script-updatedb

install_upgrade_tools_local.bat Nmap 0

# Downloads Nmap 7.70 installer
# Installs to: %~dp0tools\nmap\

Development Tools

Java JDK

Java Development Kit for running Java-based tools. Platforms: Linux Installation:

sudo ./install_upgrade_tools_remoto.sh Java

Packages Installed:

openjdk-9-jdk (preferred)
openjdk-8-jdk (fallback)

Verification:

java -version

Mobile Security Tools

Android SDK

Android development and testing tools. Platforms: Linux Dependencies:

android-tools-adb

Installation:

sudo ./install_upgrade_tools_remoto.sh AndroidSDK

Downloads:

android-sdk_r24.4.1-linux.tgz

Post-Install:

cd ~/androidsdk/android-sdk-linux
tools/android update sdk --no-ui

Apktool

APK decompilation and recompilation tool. Platforms: Linux, Windows

Linux
Windows

sudo ./install_upgrade_tools_remoto.sh ApkTools

# Downloads latest version from BitBucket
# Installs to: ~/apktool/

install_upgrade_tools_local.bat Apktool 0

# Downloads apktool_2.4.0.jar
# Installs to: tools\apktool\apktool.jar

UberApkSigner

APK signing tool. Platforms: Windows

install_upgrade_tools_local.bat UberApkSigner 0

# Downloads uber-apk-signer-1.0.0.jar
# Installs to: tools\uber-apk-signer\

JD-GUI

Java decompiler with GUI. Platforms: Windows

install_upgrade_tools_local.bat Jdgui 0

# Downloads:
# - jd-gui-1.5.2.jar
# - jd-gui-windows-1.5.2.zip
# Installs to: tools\jdgui\

Enjarify

DEX to JAR converter. Platforms: Linux, Windows

Linux
Windows

sudo ./install_upgrade_tools_remoto.sh Enjarify

git clone https://github.com/Storyyeller/enjarify
cd enjarify

install_upgrade_tools_local.bat Enjarify 0

# Downloads enjarify-1.0.3.zip
# Manual extraction required

Drozer

Android security assessment framework. Platforms: Linux Dependencies:

protobuf-compiler
dex2jar
python-setuptools
python-yaml
python-service-identity
pyopenssl

Installation:

sudo ./install_upgrade_tools_remoto.sh Drozer

git clone https://github.com/mwrlabs/drozer
cd drozer
make
python setup.py build
python setup.py install

QARK

Quick Android Review Kit. Platforms: Linux Installation:

sudo ./install_upgrade_tools_remoto.sh Qark

git clone https://github.com/linkedin/qark
cd qark
pip install -r requirements.txt
python ./setup.py install

Dependencies:

Android SDK tools
Python requirements from requirements.txt

MobSF

Mobile Security Framework. Platforms: Linux Dependencies:

libffi-dev
libtiff5-dev, libjpeg8-dev, libjpeg62-dev, libjpeg62-turbo-dev
zlib1g-dev
libfreetype6, libfreetype6-dev
liblcms2-dev
libwebp-dev
tcl8.6-dev, tk8.6-dev
python-tk
libssl-dev
wkhtmltopdf
python3-django-wkhtmltopdf
python3-venv

Python Packages:

scrapy
cryptography
cffi
pycparser
colorlog

Installation:

sudo ./install_upgrade_tools_remoto.sh MobSF

git clone https://github.com/ajinabraham/Mobile-Security-Framework-MobSF
cd Mobile-Security-Framework-MobSF
pip install -r requirements.txt --upgrade
./setup.sh

AndroBugs Framework

Android vulnerability scanner. Platforms: Linux Installation:

sudo ./install_upgrade_tools_remoto.sh AndroBugs_Framework

git clone https://github.com/AndroBugs/AndroBugs_Framework

Utility Tools

GreenShot

Screenshot utility. Platforms: Windows

install_upgrade_tools_local.bat GreenShot 0

# Opens download page in browser

Usage

Windows Local Installation

install_upgrade_tools_local.bat <Tool> <UsoProxy> [ProxyIP] [ProxyPort] [ProxyUser] [ProxyPassword]

Parameters:

Tool - Tool name to install
UsoProxy - Use proxy (0=No, 1=Yes)
ProxyIP - Proxy server IP
ProxyPort - Proxy port
ProxyUser - Proxy username
ProxyPassword - Proxy password

Linux Remote Installation

install_upgrade_tools_remoto.bat <Server> <Username> <Password> <Tool>

Special Tool Names:

Todas - Install all available tools (Linux only)

Installation Workflow

Remote Installation Process

Upload Script - Transfers .sh script to /tmp/ on remote system
Format Conversion - Removes Windows line endings (tr -d ‘\15\32’)
Permission Setting - Makes script executable (chmod 755)
Execution - Runs with sudo if needed
Cleanup - Removes temporary script files

Environment Setup

The Linux script configures:

export TERM=linux
export DEBIAN_FRONTEND="noninteractive"

This ensures:

Non-interactive installation
No prompts during package installation
Headless operation suitable for automation

Root Check

userid=`id -u`
if [ "${userid}" != '0' ]; then
  echo '[Error]: You must run this setup script with root privileges.'
  exit 1
fi

WSL (Windows Subsystem for Linux) Setup

For Windows 10 Ubuntu or Kali WSL:

# Install SSH server
sudo apt-get install openssh-server

# Generate SSH keys
cd /etc/ssh/
sudo /usr/bin/ssh-keygen -A

# Configure SSH
sudo nano /etc/ssh/sshd_config
# Add: ListenAddress 0.0.0.0

# Start SSH service
sudo service ssh --full-restart
sudo update-rc.d ssh enable

Passwordless Sudo (Optional)

sudo visudo
# Add: username ALL=(ALL) NOPASSWD: ALL

Common Dependencies

All Linux installations include:

apt-get update
apt-get install -y \
  git wget \
  python python3 python3-dev python3-pip python3-dugong \
  python-pip python-dev \
  build-essential \
  ruby ruby-dev rubygems-integration rubygems \
  python-setuptools \
  gcc gawk original-awk \
  xmlstarlet \
  unzip

Troubleshooting

Permission Denied

Issue: Script execution fails with permission error Solution:

chmod 755 install_upgrade_tools_remoto.sh
sudo ./install_upgrade_tools_remoto.sh <Tool>

Package Installation Failures

Issue: apt-get fails to install packages Solution:

# Update package lists
sudo apt-get update

# Fix broken dependencies
sudo apt-get -f install

# Retry installation

Git Clone Failures

Issue: Git repository already exists Solution: The scripts handle this automatically:

if [ $? -ne 0 ] ; then
  cd tool-directory
  git pull
else
  # Fresh clone
fi

OpenVAS Remote Access

Issue: Cannot access OpenVAS web interface remotely Solution: The script automatically configures this, but manual fix:

# Edit service file
nano /lib/systemd/system/greenbone-security-assistant.service

# Change:
--listen=127.0.0.1

# To:
--listen=0.0.0.0

# Reload and restart
systemctl daemon-reload
/etc/init.d/greenbone-security-assistant restart

References

Notes

All Linux installations use apt-get package manager
Scripts support both fresh installations and updates
Windows installations download directly from official sources
Some tools require manual extraction after download
Plugin/feed updates should be run after initial installation
Installation requires active internet connection
Proxy support available for Windows local installations

Web Scanners

Service Scanners

Mobile Analysis

Information Gathering

Utilities

​Overview

​Scripts

​Windows Local Installation

​Linux Remote Installation

​Supported Platforms

​Tool Categories

​Web Scanning Tools

​Arachni

​Information Gathering Tools

​Recon-ng

​EyeWitness

​Service Scanning Tools

​OpenVAS

​OpenVAS Plugin Updates

​Nessus Plugin Updates

​Nmap

​Development Tools

​Java JDK

​Mobile Security Tools

​Android SDK

​Apktool

​UberApkSigner

​JD-GUI

​Enjarify

​Drozer

​QARK

​MobSF

​AndroBugs Framework

​Utility Tools

​GreenShot

​Usage

​Windows Local Installation

​Linux Remote Installation

​Installation Workflow

​Remote Installation Process

​Environment Setup

​Root Check

​WSL (Windows Subsystem for Linux) Setup

​Passwordless Sudo (Optional)

​Common Dependencies

​Troubleshooting

​Permission Denied

​Package Installation Failures

​Git Clone Failures

​OpenVAS Remote Access

​References

​Notes

Overview

Scripts

Windows Local Installation

Linux Remote Installation

Supported Platforms

Tool Categories

Web Scanning Tools

Arachni

Information Gathering Tools

Recon-ng

EyeWitness

Service Scanning Tools

OpenVAS

OpenVAS Plugin Updates

Nessus Plugin Updates

Nmap

Development Tools

Java JDK

Mobile Security Tools

Android SDK

Apktool

UberApkSigner

JD-GUI

Enjarify

Drozer

QARK

MobSF

AndroBugs Framework

Utility Tools

GreenShot

Usage

Windows Local Installation

Linux Remote Installation

Installation Workflow

Remote Installation Process

Environment Setup

Root Check

WSL (Windows Subsystem for Linux) Setup

Passwordless Sudo (Optional)

Common Dependencies

Troubleshooting

Permission Denied

Package Installation Failures

Git Clone Failures

OpenVAS Remote Access

References

Notes