System Requirements
| Requirement | Details |
|---|---|
| Operating system | Kali Linux (2024+ recommended) or Debian-based |
| Python | 3.10 or higher |
| Privileges for setup | Root (sudo ./setup.sh) |
| Privileges for running | Regular user — do not run as root |
| Internet access | Required during setup to download tools and browser binaries |
What setup.sh Installs
System Tools (via apt)
| Tool | Purpose |
|---|---|
nmap | Service version detection, OS fingerprinting, script scanning |
masscan | Fast host and port discovery across large IP ranges |
netexec | SMB/LDAP/LSA enumeration, BloodHound collection |
responder | LLMNR/NBT-NS/mDNS poisoning, NTLM credential capture |
nuclei | Template-based vulnerability scanning |
mitm6 | IPv6 DHCPv6 spoofing for relay attacks |
Additional Tools (downloaded/cloned)
| Tool | Install location | Source |
|---|---|---|
ldapnomnom | /usr/bin/ldapnomnom | GitHub releases (v1.4.2, linux-x64 binary) |
ASRepCatcher | ./ASRepCatcher/ | Cloned from https://github.com/Yaxxine7/ASRepCatcher in its own venv |
Python Packages (in ./venv)
| Package | Purpose |
|---|---|
fastapi | Web framework / API server |
uvicorn[standard] | ASGI server |
aiohttp | HTTP probing for web screenshots (VPN-transparent) |
playwright + Chromium | Browser automation for web screenshots |
impacket | Kerberos, NTLM, and AD protocol support |
netifaces | Network interface enumeration |
websockets, pydantic, python-multipart, aiofiles | Supporting libraries |
pillow, pytesseract | RDP screenshot OCR |
Installation Steps
Run the setup script as root
The setup script must run as root to install system packages, binaries, and configure file ownership:The script detects the invoking user via
who am i and creates the Python venv as that user (not root), so ownership is correct from the start.What the setup script does
In order,
setup.sh:- Installs system packages via
apt: nmap, masscan, netexec, responder, nuclei, mitm6, git, sqlite3, python3-impacket, python3-pip, python3-venv, tesseract-ocr - Creates
./venvas the actual user (not root) usingsudo -u $ACTUAL_USER python3 -m venv venv - Installs all Python packages into the venv
- Installs Playwright system browser dependencies as root, then installs the Chromium binary as the actual user so it lands in
~/.cache/ms-playwright/(not/root/) - Clones ASRepCatcher and installs it in its own venv (
ASRepCatcher/ASRepCatcher-venv): - Downloads the
ldapnomnombinary (v1.4.2, linux-x64) to/usr/bin/ldapnomnom - Creates
recon/,data/, andwordlists/directories with ownership set to the actual user - Sets correct permissions on all project files and directories
Start the application
Run as your regular user (without sudo):The app will be available at
http://localhost:8000.See the Quickstart guide for first-session setup.Troubleshooting
Playwright: Executable doesn’t exist
This happens when Chromium was installed as root instead of as your regular user. Fix it by reinstalling the browser binary as your regular user:~/.cache/ms-playwright/.