| Component | Details |
|---|
| Base OS | Debian GNU/Linux 12 (Bookworm) (Running Parrot OS core) |
| Kernel Version | (Can check with uname -r) |
| Architecture | x86_64 (64-bit) |
| User | lvydvy |
| Hostname | Debian |
2. Repository Configuration
| Repository | Purpose | Status |
|---|
| Debian Official | Main system packages | ✅ Active |
| Kali Rolling | Security tools (pinned low priority) | ✅ Added |
| Metasploit Rapid7 | Official Metasploit updates | ✅ Active |
| Docker | Container runtime | ✅ Active |
| NodeSource | Node.js LTS releases | ✅ Active (held) |
| Microsoft Edge | Web browser | ✅ Active |
| VS Code | Code editor | ✅ Active |
| Spotify | Music streaming | ✅ Active |
| Tor Project | Anonymity tools | ✅ Active |
| Mullvad VPN | VPN client | ✅ Active |
| Cursor | AI code editor | ✅ Active |
| Claude Desktop | AI assistant | ✅ Active |
| AWS Corretto | Java runtime | ✅ Active |
| NVIDIA | GPU drivers (if applicable) | ✅ Active |
| Floorp | Firefox-based browser | ✅ Active |
Network Scanning & Enumeration
| Tool | Version | Purpose |
|---|
| Nmap | 7.95 | Network discovery and port scanning |
| Masscan | (Installed) | Mass IP port scanning |
| Gobuster | (Installed) | Directory/file brute-forcing |
| FFUF | (Installed) | Fast web fuzzer |
| Feroxbuster | (Installed) | Directory brute-forcing |
| Enum4linux | (Installed) | Windows/Linux enumeration |
| SMBMap | (Installed) | SMB share enumeration |
| Responder | (Installed) | LLMNR/NBT-NS poisoner |
| DNSEnum | (Installed) | DNS enumeration |
| DNSRecon | (Installed) | Advanced DNS reconnaissance |
Web Application Security
| Tool | Version | Purpose |
|---|
| SQLmap | 1.9.6 | SQL injection detection & exploitation |
| Nikto | (Installed) | Web server vulnerability scanner |
| WPScan | 4.0.0 | WordPress vulnerability scanner |
| JoomScan | (Installed) | Joomla vulnerability scanner |
| Hydra | v9.5 | Login brute-forcing (multiple protocols) |
| Burp Suite Community | (Installed) | Web proxy & testing |
Password Cracking & Authentication
| Tool | Version | Purpose |
|---|
| John the Ripper | 1.9.0 | Password hash cracking |
| Hashcat | (Installed) | GPU-based password cracking |
| Crunch | (Installed) | Wordlist generation |
| CeWL | (Installed) | Custom wordlist generator |
Exploitation Frameworks
| Tool | Version | Purpose |
|---|
| Metasploit Framework | 6.4.135-dev | Exploit development & penetration testing |
| Pwntools | (Installed) | CTF & exploit development library |
| Evil-WinRM | v3.9 | Windows Remote Management shell |
Active Directory & Windows Tools
| Tool | Version | Purpose |
|---|
| Impacket | (Installed) | Windows protocol implementation |
| BloodHound | (Installed) | Active Directory relationship mapping |
| BloodyAD | (Installed) | AD privilege escalation |
| Certipy-AD | (Installed) | ADCS attack toolkit |
| MITM6 | (Installed) | IPv6 DNS spoofing |
| Coercer | (Installed) | Authentication coercion attacks |
| LDAPDomainDump | (Installed) | LDAP domain enumeration |
Forensics & Analysis
| Tool | Version | Purpose |
|---|
| Wireshark | (Installed) | Network packet analyzer |
| Binwalk | (Installed) | Firmware analysis |
| ExploitDB | (Installed) | Exploit database |
| GDB | (Installed) | GNU Debugger |
4. Development & Programming Languages
| Language/Tool | Version | Status |
|---|
| Python | 3.12.3 | ✅ Installed (with pip3) |
| Ruby | 3.3.8 | ✅ Installed (with gem) |
| Node.js | v22.22.3 | ✅ Held (stable) |
| Node Package Manager (npm) | (Latest) | ✅ Installed |
| GCC/G++ | (Latest) | ✅ Installed |
| Make | (Latest) | ✅ Installed |
| Git | (Latest) | ✅ Installed |
| Docker | 29.6.0 | ✅ Installed & running |
5. Python Packages (Security-Focused)
| Package | Purpose |
|---|
| impacket | Windows protocol libraries |
| pwntools | CTF/exploit development |
| bloodhound | BloodHound data collection |
| bloodyAD | Active Directory attacks |
| certipy-ad | ADCS certificate attacks |
| coercer | Authentication coercion |
| mitm6 | IPv6 DNS spoofing |
| ldapdomaindump | LDAP domain enumeration |
| requests | HTTP library |
| scapy | Packet manipulation |
6. Ruby Gems (Security-Focused)
| Gem | Version | Purpose |
|---|
| evil-winrm | 3.9 | Windows Remote Management shell |
| wpscan | 4.0.0 | WordPress vulnerability scanner |
7. Virtualization & Containers
| Tool | Version | Purpose |
|---|
| Docker | 29.6.0 | Container runtime |
| Open-VM-Tools | (Installed) | VMware guest integration |
| Service | Status | Purpose |
|---|
| PostgreSQL | ✅ Running | Metasploit database backend |
| SSH Server | ✅ Enabled | Remote secure shell access |
| Docker Daemon | ✅ Running | Container management |
| NetworkManager | ✅ Active | Network management |
| Firewall (UFW) | ✅ Active (if enabled) | Basic firewall protection |
9. Key Configuration Files
| File | Purpose |
|---|
~/.msf4/database.yml | Metasploit database configuration |
/etc/apt/sources.list.d/kali.list | Kali repository configuration |
~/.bashrc | Shell environment aliases & settings |
~/.gitconfig | Git user configuration |
/etc/docker/daemon.json | Docker configuration (if present) |
10. Held or Pinned Packages
| Package | Version | Reason |
|---|
| Node.js | v22.22.3 | Held to avoid Kali repository conflict |
11. Key Directories
| Directory | Purpose |
|---|
/usr/share/metasploit-framework | Metasploit installation |
/usr/share/wordlists | Password/wordlist storage |
/usr/share/kali-tools | Kali repository tools |
~/.msf4 | Metasploit user data |
~/Downloads/Hacking-Tools-Installer | Installer script directory |
12. Quick Commands Reference
System Maintenance:
bash
# Update system
sudo apt update && sudo apt upgrade -y
# Clean system
sudo apt autoremove -y && sudo apt clean
# Check held packages
apt-mark showhold
Tool-Specific:
bash
# Start Metasploit
msfconsole
# Check Metasploit database
msfconsole -q -x "db_status; exit"
# Run Nmap quick scan
nmap -sS -p 22,80,443 127.0.0.1
# Test John
john --test
# Start PostgreSQL
sudo systemctl start postgresql
13. Potential Next Steps
| Action | Command |
|---|
| Install AI/ML packages | pip3 install tensorflow torch scikit-learn |
| Install Ollama (local AI) | curl -fsSL https://ollama.com/install.sh | sh |
| Set up Metasploitable lab | Download & configure vulnerable VM |
| Create project workspace | mkdir ~/projects |
| Configure SSH keys | ssh-keygen -t ed25519 |
14. Summary Table
| Category | Status |
|---|
| Base OS | ✅ Debian 12 with Parrot core |
| Security Tools | ✅ 40+ tools installed |
| Development Tools | ✅ Python, Ruby, Node.js, Docker |
| Repositories | ✅ 15+ repositories active |
| Metasploit | ✅ v6.4.135 with database |
| System Updates | ✅ Fully updated (except Node.js held) |
| Network | ✅ Internet access confirmed |
| Services | ✅ PostgreSQL, SSH, Docker running |
✅ Final Assessment
My system is now a fully operational penetration testing and development workstation, equipped with:
- ✅ 40+ core security tools
- ✅ Latest versions of all major frameworks
- ✅ Multiple programming languages for development
- ✅ Container support with Docker
- ✅ Working database for Metasploit
- ✅ Clean, optimized configuration
This setup is ready for professional penetration testing, CTF challenges, security research, and development work.
