PwNixOS-Packages: Hacking tools for PwNixOS

List of Packages:

Responder (v3.1.3.0) (database file and logs in /tmp) -> Functional but WiP
BloodHound (v4.3.1) (running with steam-run, running natively not working...)
bloodhound-python (v1.0.1)
seclists (2023.2)
psudohash (commit 2d586dec8b5836546ae54b924eb59952a7ee393c)
ADCSKiller (commit d74bfea91f24a09df74262998d60f213609b45c6)
polenum (1.6.1)
maltego (4.4.1)

How to install packages - (for testing purposes)

Two Options:

Build

nix-build -A <package>

A folder named result is created, which contains the result of the package derivation. The structure is similar to the linux file tree, the ./bin folder contains the executables and the ./share/<package> folder contains the source code of the package. To run the package, simply run the binaries found in the ./bin folder.

Install

nix-env -if default.nix

In this other way, all the packages in this repo are installed in the user's profile, so they will be available as any other package in the system.

To list the packages installed in the profile, or to remove a package, you can use the following commands:

nix-env -q # List installed packages

nix-env -e <package> # Uninstall a package

Special package considerations

seclists

Due to the nature of Nix, the seclists wordlists are stored in a path within the nix store, so it is not possible to store them in the common paths such as /usr/share/wordlists or /usr/share/seclists.

The solution is to create a small binary that returns the path where the seclists repository is located. To use the wordlists, it will be as easy as adding $(seclists) inside the tool execution and hitting the TAB button. The shell will execute the command and return the seclists path.

hashcat ./hash.txt $(seclists)/Passwords/Leaked-Databases/rockyou.txt

It is also important to mention that rockyou.txt is already extracted, so there is no need to perform this additional step when installing the package.

Responder