PTART is a vulnerability organizer tool developed for pentesters, bug bounty hunters, anybody who wants to leverage its security expertise. Basically this tool will help you to :
- Report a vulnerabiltity with screenshots, attachments, CVSSv3.1 Score, CVSSv4.0 Score, OWASP top 10 labels in less than 3min.
- Avoid retyping again and again the same vulnerabilities content by using templates (common and personal).
- Generate attack scenarios that can be imagined using your findings.
- Generate ToDo lists from pentest methodologies (OWASP and Wahh are natively included) and assign tasks to a project member.
- Generate automatically a nice HTML/PDF RevealJS report.
- Generate automatically an Excel report to share status with your management.
- Generate automatically a full report in LaTeX.
- Customize yours labels for categorizing vulnerabilities.
- Have discussions on a bug using the comment area.
- Have a common and shared workspace within the team.
- Secure your work with 2FA.
- Use PTART API with dedicated token for 3rd party application.
- Prepare the Burp configuration file according to project scope.
- Ask Chat GPT to write your report ;-)
A special thanks to @pavanw3b for the Sh00t! project.
-
Flag: It's a test case that needs to be tested. Flags can be generated automatically based on the testing methodology chosen or directly during the pentest. Based on our experience, flags are often useful when we are busy to struggle with an endpoint and we see a new point of interest in order to come back to it afterward.
-
Hit: Hits are bugs. Typically a hit contains technical description of the bug, Affected Files/URLs, Steps To Reproduce and Fix Recommendation. Screenshots, attachments, comments can enrich the content of the vulnerability.
-
Assessment: Assessment is a testing assessment. It can be an assessment of an application, a program - up to the user the way wanted to manage. It's a part of project.
-
Project: Project contains assessments. Project can be a logical separation of what you do. It can be different job, bug bounty, up to you to decide.
// Your First Program
class HelloWorld {
public static void main(String[] args) {
System.out.println("Hello, World!");
}
}
In order to enable, the Chat GPT
console, you just need to enter your api key in settings.py upon CHATGPT_API_KEY
key.
Preparing PTART environment :
Python requires Python 3.11 and a few more packages. The simplest way to set up PTART is using venv.
- Clone the project and go to the new directory.
- Create a new virtual environment and installing dependencies:
python3.11 -m venv venv
. - Run the virtual environment:
source venv/bin/activate
and install dependenciespip install -r requirements.txt
(If psycopg2 and pandoc failed to be installed, trysudo apt get install libpq-dev
orbrew install postgresql
,brew install pandoc
, if rlPyCairo failed to be install, trysudo apt install libcairo2-dev
orbrew install cairo pkg-config
) - Create the database:
python manage.py migrate
- Create the super user:
python manage.py createsuperuser
- (Optional) Initiate PTART with integrated loaders.
That's all for the first time. Follow the next steps whenever you want to start PTART.
Starting PTART:
- Start PTART server:
python manage.py runserver
- Access http://127.0.0.1:8000/ on your favorite browser.
- Login with the user credentials.
- Welcome to PTART.
- Once you are done, stop the server:
Ctrl + C
- Navigate to the folder where PTART was cloned:
cd PTART
- Stop the server if it's running:
Ctrl + C
- Pull the latest code base via git:
git pull
or download the source from Github and replace the files. - Setup any additional dependencies:
pip install -r requirements.txt
- Make the latest database changes:
python manage.py migrate
- Start the server:
python manage.py runserver
- Enjoy