skel/bin/install_tool

#!/bin/bash

set -ue

REINSTALL=0
PACKAGES=1

export GO111MODULE=on

while getopts -- "-:" a ; do
  # shellcheck disable=SC2154
  case "${a}" in
    -)
      case "${OPTARG}" in
        reinstall)
          REINSTALL=1
          ;;
        no-packages)
          PACKAGES=0
          ;;
        *)
          echo "Unknown long option ${OPTARG}" >/dev/stderr
          exit 1
          ;;
      esac
      ;;
    *)
      echo "Unknown short option ${OPTARG}" >/dev/stderr
      exit 1
      ;;
  esac
done

shift $((OPTIND-1))

if [ $# -ne 1 ] ; then
  echo "Usage: ${0} <tool>" >/dev/stderr
  exit 1
fi
TOOL=${1}

function die {
  echo "$@" >/dev/stderr
  exit 1
}

function install_pkgs {
  if [ ${PACKAGES} -eq 0 ] ; then
    return 0
  fi
  # TODO: check if packages are already installed
  if [ "$(id -u)" -ne "0" ] ; then
    sudo apt-get -y install "$@" || (
      echo -n "Unable to install packages, please ensure these " >/dev/stderr
      echo "are installed, then run with --no-packages." >/dev/stderr
      echo "$@"
      false )
    return 0
  fi
  apt-get -y install "$@"
}

function download {
  SRC=${1}
  DST=${2}
  echo -n "Downloading ${SRC} to ${DST}..." >&2
  # TODO: consider curl instead?
  wget --no-server-response -q -O "${DST}" --content-disposition "${SRC}"
  echo " done." >&2
}

function check_sudo {
  sudo -l >/dev/null
}

function add_bin_symlink {
  local TARGET NAME BINDIR
  TARGET="${1}"
  NAME="${2:-$(basename "${1}")}"
  BINDIR="${HOME}/bin/tools/"
  mkdir -p -- "${BINDIR}"
  ln -sf "${DESTDIR}/${TARGET}" "${BINDIR}/${NAME}"
}

mkdir -p "${HOME}/tools"

DESTDIR="${HOME}/tools/${TOOL}"

function makedest {
  if [ -d "${DESTDIR}" ] ; then
    if [ "${REINSTALL}" -eq 1 ] ; then
      rm -ri "${DESTDIR}"
    else
      echo "${DESTDIR} exists but not reinstalling." >/dev/stderr
      return 1
    fi
  fi
  mkdir -p "${DESTDIR}"
}

function makedest_or_die {
  makedest || die "Aborting."
}

# Begin main tool selection
case ${TOOL} in
  john)
    makedest_or_die
    install_pkgs libssl-dev git build-essential yasm libgmp-dev libpcap-dev \
      pkg-config libbz2-dev libopenmpi-dev openmpi-bin libnss3-dev \
      libkrb5-dev libgmp-dev
    jtemp=$(mktemp -d)
    git clone https://github.com/magnumripper/JohnTheRipper.git "${jtemp}/john"
    cd "${jtemp}/john/src"
    ./configure && make -sj2
    cp -r "${jtemp}"/john/run/* "${DESTDIR}"
    rm -rf "${jtemp}"
    # Persistent files
    mkdir -p "${HOME}/.john"
    touch "${HOME}/.john/john.pot"
    ln -sf "${HOME}/.john/*" "${DESTDIR}"
    add_bin_symlink john
    ;;
  wordlists)
    makedest
    download \
      http://downloads.skullsecurity.org/passwords/rockyou.txt.bz2 \
      "${DESTDIR}/rockyou.txt.bz2"
    bunzip2 "${DESTDIR}/rockyou.txt.bz2"
    download \
      http://downloads.skullsecurity.org/passwords/phpbb.txt.bz2 \
      "${DESTDIR}/phpbb.txt.bz2"
    bunzip2 "${DESTDIR}/phpbb.txt.bz2"
    download \
      http://downloads.skullsecurity.org/passwords/hak5.txt.bz2 \
      "${DESTDIR}/hak5.txt.bz2"
    bunzip2 "${DESTDIR}/hak5.txt.bz2"
    ;;
  seclists)
    git clone https://github.com/danielmiessler/SecLists.git "${DESTDIR}"
    ;;
  werdlists)
    git clone --depth 1 https://github.com/decal/werdlists.git "${DESTDIR}"
    ;;
  gcloud)
    makedest_or_die
    gbase="https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/"
    # TODO: find a way to make this version independent
    gsdk="google-cloud-sdk-277.0.0-linux-x86_64.tar.gz"
    download "${gbase}${gsdk}" /tmp/gcloud.tar.gz
    tar zxf /tmp/gcloud.tar.gz --strip-components=1 -C "${DESTDIR}"
    rm /tmp/gcloud.tar.gz
    add_bin_symlink bin/gcloud
    ;;
  android-sdk)
    # TODO: find a way to make this version independent
    asdk="https://dl.google.com/android/repository/platform-tools_r31.0.2-linux.zip"
    download ${asdk} /tmp/android-tools.zip
    unzip -d "${DESTDIR}" /tmp/android-tools.zip
    rm /tmp/android-tools.zip
    # Install components
    "${DESTDIR}/tools/bin/sdkmanager" "emulator" "platform-tools"
    ;;
  burp)
    # Install latest burp free
    makedest
    if ! download \
      https://portswigger.net/DownloadUpdate.ashx\?Product=Free \
      "${DESTDIR}/burp-free.jar" ; then
      echo "Download failed." >&2
      exit 1
    fi
    if [ -x /usr/bin/jarwrapper ] ; then
      # We have binfmt support for jar, so add to bin
      chmod +x "${DESTDIR}"/*.jar
      ln -sf "${DESTDIR}"/*.jar "${HOME}/bin/burp"
    fi
    ;;
  mitmproxy)
    makedest_or_die
    ver=$(python3 -c 'from urllib import request; import json; print(json.load(request.urlopen("https://api.github.com/repos/mitmproxy/mitmproxy/releases/latest"))["tag_name"].replace("v",""))')
    download \
      "https://snapshots.mitmproxy.org/${ver}/mitmproxy-${ver}-linux.tar.gz" \
      /tmp/mitmproxy.tar.gz
    tar zx -C "${DESTDIR}" -f /tmp/mitmproxy.tar.gz
    rm /tmp/mitmproxy.tar.gz
    add_bin_symlink mitmproxy
    add_bin_symlink mitmweb
    add_bin_symlink mitmdump
    ;;
  esp)
    makedest_or_die
    src="https://dl.espressif.com/dl/xtensa-esp32-elf-linux64-1.22.0-61-gab8375a-5.2.0.tar.gz"
    download ${src} /tmp/esp32.tar.gz
    tar zx -C "${DESTDIR}" -f /tmp/esp32.tar.gz
    rm /tmp/esp32.tar.gz
    git clone --recursive https://github.com/espressif/esp-idf.git "${DESTDIR}/esp-idf"
    ;;
  dex2jar)
    makedest_or_die
    src="https://github.com/pxb1988/dex2jar/releases/download/2.0/dex-tools-2.0.zip"
    download ${src} /tmp/dex2jar.zip
    tmpd=$(mktemp -d)
    unzip -d "${tmpd}" /tmp/dex2jar.zip
    mv "${tmpd}"/* "${DESTDIR}"
    rm /tmp/dex2jar.zip
    rm -rf "${tmpd}"
    rm "${DESTDIR}"/*.bat
    chmod +x "${DESTDIR}"/*.sh
    ;;
  proxmark3)
    install_pkgs p7zip git build-essential libreadline5 libreadline-dev \
      libusb-0.1-4 libusb-dev libqt4-dev perl pkg-config wget libncurses5-dev \
      gcc-arm-none-eabi libstdc++-arm-none-eabi-newlib
    src="https://github.com/Proxmark/proxmark3.git"
    git clone "${src}" "${DESTDIR}"
    cd "${DESTDIR}"
    make -sj2
    check_sudo && sudo /bin/sh -c \
      "cp -rf driver/78-mm-usb-device-blacklist.rules \
         /etc/udev/rules.d/77-mm-usb-device-blacklist.rules &&
         udevadm control --reload-rules"
    ;;
  cyberchef)
    makedest
    src=$(python3 -c 'from urllib import request; import json; print(filter(lambda x: x["name"]=="cyberchef.htm", json.load(request.urlopen("https://api.github.com/repos/gchq/CyberChef/releases/latest"))["assets"])[0]["browser_download_url"])')
    download "${src}" "${DESTDIR}/cyberchef.html"
    ;;
  apktool)
    makedest_or_die
    download \
      https://raw.githubusercontent.com/iBotPeaches/Apktool/master/scripts/linux/apktool \
      "${DESTDIR}/apktool"
    download \
      https://bitbucket.org/iBotPeaches/apktool/downloads/apktool_2.3.3.jar \
      "${DESTDIR}/apktool.jar"
    chmod +x "${DESTDIR}/apktool"
    add_bin_symlink apktool
    ;;
  ptf)
    makedest_or_die
    src="https://github.com/trustedsec/ptf.git"
    git clone "${src}" "${DESTDIR}"
    ;;
  pwndbg)
    if ! command -v gdb > /dev/null 2>&1 ; then
      echo 'No gdb available!' >/dev/stderr
      exit 1
    fi
    git clone --depth 1 -b stable https://github.com/pwndbg/pwndbg.git "${DESTDIR}"
    PY_PACKAGES=${DESTDIR}/vendor
    mkdir -p "${PY_PACKAGES}"
    PYVER=$(gdb -batch -q --nx -ex 'pi import platform; print(".".join(platform.python_version_tuple()[:2]))')
    PYTHON=$(gdb -batch -q --nx -ex 'pi import sys; print(sys.executable)')
    PYTHON="${PYTHON}${PYVER}"
    "${PYTHON}" -m pip install --target "${PY_PACKAGES}" -Ur "${DESTDIR}/requirements.txt"
    "${PYTHON}" -m pip install --target "${PY_PACKAGES}" -U capstone unicorn
    # capstone package is broken
    cp "${PY_PACKAGES}/usr/lib/*/dist-packages/capstone/libcapstone.so" "${PY_PACKAGES}/capstone"
    ;;
  gef)
    makedest_or_die
    if ! command -v gdb > /dev/null 2>&1 ; then
      echo 'No gdb available!' >/dev/stderr
      exit 1
    fi
    download \
      https://github.com/hugsy/gef/raw/master/gef.py \
      "${DESTDIR}/gef.py"
    ;;
  aflplusplus)
    install_pkgs libtool-bin libglib2.0-dev libpixman-1-dev clang clang-tools \
      llvm python3-setuptools
    git clone "https://github.com/vanhauser-thc/AFLplusplus" "${DESTDIR}"
    make -C "${DESTDIR}" distrib
    ;;
  exploitdb)
    if test -d "${DESTDIR}" ; then
      echo "Already installed, updating instead..." >/dev/stderr
      "${DESTDIR}/searchsplit" -u
    else
      git clone --depth 1 \
        https://github.com/offensive-security/exploitdb.git \
        "${DESTDIR}"
      add_bin_symlink searchsploit
      cp "${DESTDIR}/.searchsploit_rc" "${HOME}/.searchsploit_rc"
      sed -i "s|/opt/exploitdb|${DESTDIR}|" "${HOME}/.searchsploit_rc"
    fi
    ;;
  cura)
    makedest
    ver=$(python3 -c 'from urllib import request; import json; print(json.load(request.urlopen("https://api.github.com/repos/Ultimaker/Cura/releases/latest"))["name"].replace("v",""))')
    echo "Latest Cura is ${ver}"
    download \
      "https://github.com/Ultimaker/Cura/releases/download/${ver}/Cura-${ver}.AppImage" \
      "${DESTDIR}/Cura.AppImage"
    chmod +x "${DESTDIR}/Cura.AppImage"
    add_bin_symlink "Cura.AppImage" cura
    ;;
  rr)
    ver=$(python3 -c 'from urllib import request; import json; print(json.load(request.urlopen("https://api.github.com/repos/mozilla/rr/releases/latest"))["name"])')
    echo "Latest rr is ${ver}"
    download \
      "https://github.com/mozilla/rr/releases/download/${ver}/rr-${ver}-Linux-$(uname -m).deb" \
      "/tmp/rr.deb"
    sudo dpkg -i /tmp/rr.deb
    ;;
  nmap-parse-output)
    git clone --depth 1 \
      https://github.com/ernw/nmap-parse-output.git \
      "${DESTDIR}"
    add_bin_symlink nmap-parse-output
    cat <<EOF >"${HOME}/.zshrc.d/99-nmap-parse-output.zsh"
if test -d ${DESTDIR} ; then
  autoload bashcompinit
  bashcompinit
  source ${DESTDIR}/_nmap-parse-output
fi
EOF
    ;;
  logiops)
    install_pkgs cmake libevdev-dev libudev-dev libconfig++-dev checkinstall
    git clone "https://github.com/PixlOne/logiops.git" "${DESTDIR}"
    mkdir -p "${DESTDIR}/build"
    cd "${DESTDIR}/build"
    cmake ..
    make
    sudo checkinstall --pkgname logiops --maintainer "${USER}" -y
    ;;
  aws)
    DN=$(mktemp -d)
    cd "${DN}"
    curl "https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip" -o "${DN}/awscliv2.zip"
    unzip "${DN}/awscliv2.zip"
    mv "${DN}/aws/dist" "${DESTDIR}"
    add_bin_symlink aws
    rm -rf ${DN}
    ;;
  tmpmail)
    install_pkgs curl w3m jq
    mkdir -p ${DESTDIR}
    curl -L "https://git.io/tmpmail" > ${DESTDIR}/tmpmail
    chmod +x ${DESTDIR}/tmpmail
    add_bin_symlink tmpmail
    ;;
  gf)
    install_pkgs golang-go silversearcher-ag
    go get -u github.com/tomnomnom/gf
    mkdir -p ${HOME}/.config
    if test -d ${HOME}/.config/gf ; then
      git -C ${HOME}/.config/gf pull
    else
      git clone https://github.com/Matir/gf-patterns.git ${HOME}/.config/gf
    fi
    ;;
  gron)
    go get -u github.com/tomnomnom/gron
    ;;
  httprobe)
    go get -u github.com/tomnomnom/httprobe
    ;;
  ffuf)
    go get -u github.com/ffuf/ffuf
    ;;
  gobuster)
    go get -u github.com/OJ/gobuster
    ;;
  amass)
    go get -u github.com/OWASP/Amass/v3/...
    ;;
  cht.sh)
    install_pkgs rlwrap
    mkdir -p ${DESTDIR}
    curl https://cht.sh/:cht.sh > ${DESTDIR}/cht.sh
    chmod +x ${DESTDIR}/cht.sh
    add_bin_symlink cht.sh
    ;;
  age)
    go get -u github.com/FiloSottile/age/cmd/age
    go get -u github.com/FiloSottile/age/cmd/age-keygen
    ;;
  *)
    echo "Unknown tool: ${TOOL}" >/dev/stderr
    echo "Options:" >/dev/stderr
    awk 'BEGIN {s=0;FS=")"};/main tool selection/{s=1};/^\s+\w+)$/{if(s==1){print $1}}' "$0" | sort | while read -r opt; do
      echo -e "\\t${opt}" >/dev/stderr
    done
    exit 1
    ;;
esac