You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: Cheatsheet.md
+81-67
Original file line number
Diff line number
Diff line change
@@ -2,29 +2,41 @@
2
2
3
3
I've put together a little cheatsheet to help you on your way!
4
4
5
-
---
6
5
7
-
## Pick a Packer provisioner
8
-
We currently offer [three](https://github.com/pry0cc/axiom/tree/master/images/provisioners) different base images you can provision. Our [Default](https://github.com/pry0cc/axiom/blob/master/images/provisioners/full.json) provisioner comes with tools to run most [modules](https://github.com/pry0cc/axiom/tree/master/modules). The [ReconFTW](https://github.com/pry0cc/axiom/blob/master/images/provisioners/reconftw.json) provisioner comes with all tools installed and the [Barebones](https://github.com/pry0cc/axiom/blob/master/images/provisioners/barebones.json) provisioner comes with no tools installed. If you want to bring-you-own Packer JSON provisioner, select custom.
6
+
---
7
+
# axiom-build
8
+
**Pick a Packer provisioner**:hatching_chick:
9
+
> You must run axiom-configure before anything else. THis creates your axiom.json file which is required by other commands.
9
10
```
10
11
axiom-build
11
12
```
12
-
## Initialize a single instance
13
+
> We currently offer [three](https://github.com/pry0cc/axiom/tree/master/images/provisioners) different base images you can provision, and 2 custom images.
14
+
> -[Default](https://github.com/pry0cc/axiom/blob/master/images/provisioners/default.json) provisioner comes with all tools installed.
15
+
> -[ReconFTW](https://github.com/pry0cc/axiom/blob/master/images/provisioners/reconftw.json) provisioner comes with all tools installed.
16
+
> -[Barebones](https://github.com/pry0cc/axiom/blob/master/images/provisioners/barebones.json) provisioner comes with no tools installed and is just the base ubuntu image.
13
17
18
+
> Custom Images:
19
+
> -[Full](https://github.com/pry0cc/axiom/blob/master/images/provisioners/full.json) provisioner comes with only tools with [modules](https://github.com/pry0cc/axiom/tree/master/modules) availabled. Reccomended for axiom-feet.
20
+
> -[Light](https://github.com/pry0cc/axiom/blob/master/images/provisioners/light.json) provsioner comes with zsh and a few other minor adjustments over the barebones provsioner.
21
+
> If you want to bring-your-own Packer JSON provisioner, select custom. *Make sure your packer json is placed in ~/.axiom/images/provsioners*
#Note: profile argument is file name is without .json
19
30
```
20
-
21
-
the `--deploy` option allows you to deploy a profile (stored in `~/.axiom/profiles/`). `--restore` will restore a profile. These options can be used together.
31
+
> the `--deploy` option allows you to deploy a profile (stored in `~/.axiom/profiles/`). `--restore` will restore a profile. These options can be used together.
22
32
23
33
---
24
-
25
-
## Connect to an instance
34
+
# axiom-ssh
35
+
**Connect to an instance** - axiom-connect**
26
36
27
37
```bash
38
+
axiom-connect #automatically connects to list intialized instance
39
+
axiom-connect <name>
28
40
axiom-ssh <name><ssh args>
29
41
axiom-ssh <name> --tmux
30
42
axiom-ssh <name> -m -t=<tmux session># Connect with mosh and attach to tmux session
@@ -33,28 +45,30 @@ axiom-ssh <name> -L 8080:127.0.0.1:8080 -D 4040 # All additional SSH args are p
33
45
axiom-ssh <name> --cache # Don't generate ssh config, just connect with cache
34
46
axiom-ssh --just-generate # Generate an SSH config at ~/.axiom/.sshconfig
35
47
```
36
-
37
-
## Backup an initialized instance to the cloud
48
+
---
49
+
# axiom-backup
50
+
**Backup an initialized instance to the cloud**:luggage:
38
51
39
52
```bash
40
53
axiom-backup
41
54
```
42
55
43
-
After running axiom-init you can set up config files, unique wordlists, private tools etc, take a snapshot of that image and use it to deploy future axiom instances/fleets.
56
+
> After running axiom-init you can set up config files, unique wordlists, private tools etc, take a snapshot of that image and use it to deploy future axiom instances/fleets.
44
57
45
58
---
46
-
47
-
## Backup the home directory of an initialized instance to the local filesystem
59
+
# axiom-sync
60
+
**Backup the home directory of an initialized instance to the local filesystem**
48
61
49
62
```bash
50
63
axiom-sync instance01
51
64
```
52
65
53
-
This allows you to download a copy of everything in an axiom instance to you local filesystem
66
+
> This allows you to download a copy of everything in an axiom instance to you local filesystem
axiom-boxes get pry0cc/lazy # Get a box from github, username/repo
67
81
```
68
-
69
-
Using the archive option will convert the box to a tarball and encrypt using the email specified in your account `~/.axiom/accounts/*.json`
82
+
> Using the archive option will convert the box to a tarball and encrypt using the email specified in your account `~/.axiom/accounts/*.json`
70
83
71
84
---
72
85
73
-
## Manage user accounts
86
+
# axiom-region
87
+
**Switch to a new region**:compass:
74
88
75
89
```bash
76
-
axiom-account-setup # Setup a new account
77
-
axiom-account # No args, list available accounts
78
-
axiom-account <account># Select/Switch to the specifed account
90
+
axiom-region ls # lists regions
91
+
axiom-region select<region># select region
92
+
93
+
axiom-region selectams2
79
94
```
80
95
81
96
---
82
97
83
-
## Initialize a fleet
98
+
# axiom-account
99
+
**Manage user accounts**
84
100
85
101
```bash
86
-
axiom-fleet -i=13#Initialize a fleet, name it randomly
87
-
axiom-fleet testy -i=8 # Initialize a fleet named 'testy', instances will be named, testy01, test02 etc
88
-
axiom-fleet testy -i=10 --regions=NYC1,LON1,TOR1 # Initialize a fleet using round-robin region distribution
102
+
axiom-account-setup#Setup a new account
103
+
axiom-account # No args, list available accounts
104
+
axiom-account <account># Select/Switch to the specifed account
89
105
```
90
-
91
106
---
92
107
93
-
## Copy files to and from hosts
94
-
95
-
Copy a remote file from all instances in myfleet to local folder. `'$name'` must be wrapped single quotes. `'$name'` is a required literal string and gets interpolated from the instance name. <br>
108
+
# axiom-scp
109
+
**Copy files to and from hosts**
110
+
>Copy a remote file from all instances in myfleet to local folder. `'$name'` must be wrapped single quotes. `'$name'` is a required literal string and gets interpolated from the instance name. <br>
@@ -126,57 +142,65 @@ axiom-deploy openvpn # Install openvpn against host or fleet
126
142
axiom-deploy covenant # Install covenent
127
143
```
128
144
129
-
All profiles can be found in `~/.axiom/profiles`
130
-
131
-
---
145
+
> All profiles can be found in`~/.axiom/profiles`
132
146
133
-
## Connect to an OpenVPN Server Deployed by Axiom
147
+
**Connect to a remote axiom instance Docker (over ssh)**
134
148
135
149
```bash
136
-
axiom-vpn <instance>
150
+
axiom-select <instance>
151
+
. axiom-docker # Not a typo, the . means source
152
+
docker ps
137
153
```
138
-
139
154
---
140
-
141
-
## Connect to a remote axiom instance Docker (over ssh)
155
+
# axiom-vpn
156
+
**Connect to an OpenVPN Server Deployed by Axiom**
142
157
143
158
```bash
144
-
axiom-select <instance>
145
-
. axiom-docker # Not a typo, the . means source
146
-
docker ps
159
+
axiom-vpn <instance>
147
160
```
148
161
149
162
---
150
163
151
-
## Proxy through a set of hosts (or one)
152
164
165
+
# axiom-proxy
166
+
**Proxy through a set of hosts (or one)**
153
167
```bash
154
168
axiom-proxy '<fleet>*'
155
169
axiom-proxy '<instance>'
156
170
axiom-proxy 'testy*'
157
171
proxychains4 curl -s ipinfo.io
158
172
```
159
-
160
-
This will SSH tunnel all hosts to a range of local ports, 127.0.0.1:5000-50100, then generate a proxychains configuration file to `./proxychains.conf`
173
+
> This will SSH tunnel all hosts to a range of local ports, 127.0.0.1:5000-50100, then generate a proxychains configuration file to `./proxychains.conf`
161
174
162
175
---
163
176
164
-
## Create a DNS A record
165
-
177
+
# axiom-dns
178
+
**Create a DNS A record**
179
+
*Currently only supported by Digital Ocean*
166
180
```bash
167
181
axiom-dns ls # List domains
168
182
axiom-dns ls <domain># List records for domain
169
183
axiom-dns add <subdomain><domain><ip address>
170
184
axiom-dns add cisco navisec.xyz 167.71.89.136 # Example, this will create a record cisco.navisec.xyz pointing to 167.71.89.136
171
185
```
172
-
173
-
Domain names can be hosted in DigitalOcean ([https://cloud.digitalocean.com/networking/domains?](https://cloud.digitalocean.com/networking/domains?i=87a4bd))
186
+
> Domain names can be hosted in DigitalOcean ([https://cloud.digitalocean.com/networking/domains?](https://cloud.digitalocean.com/networking/domains?i=87a4bd))
174
187
175
188
---
176
189
177
-
## Scanning using a fleet
190
+
# axiom-fleet
191
+
**Initialize a fleet** :rocket:
192
+
193
+
```bash
194
+
axiom-fleet -i=13 # Initialize a fleet, name it randomly
195
+
axiom-fleet testy -i=8 # Initialize a fleet named 'testy', instances will be named, testy01, test02 etc
196
+
axiom-fleet testy -i=10 --regions=NYC1,LON1,TOR1 # Initialize a fleet using round-robin region distribution
197
+
```
198
+
199
+
---
178
200
179
-
Modules are in `~/.axiom/modules/`
201
+
# axiom-scan
202
+
**Scanning using a fleet** :rocket:
203
+
*Modules are in`~/.axiom/modules/`*
180
204
181
205
```bash
182
206
axiom-select 'fleet*'# fleets should be already selected, but just in case, select can be a good idea
@@ -196,21 +220,11 @@ axiom-scan ips.txt -m nmap -oX full -p- -T5 -sV --script=vulners # Will create
196
220
197
221
axiom-scan ips.txt -m masscan -oG masscan.txt # Run masscan
198
222
```
199
-
200
223
---
201
224
202
-
## Switch to a new region
203
-
204
-
```bash
205
-
axiom-region ls # lists regions
206
-
axiom-region select<region># select region
207
-
208
-
axiom-region selectams2
209
-
```
210
225
211
-
---
212
-
213
-
## Execute a command against an Instance
226
+
# axiom-exec
227
+
**Execute a command against an Instance** :robot:
214
228
215
229
```bash
216
230
axiom-exec '<command>''<instance>'# Execute a command against an instance
@@ -219,4 +233,4 @@ axiom-exec '<command>' '<instance>' -q --cache # Execute silent, just show comm
219
233
220
234
axiom-exec 'nmap -T5 navisec.io''testy01' -q --cache # Example
0 commit comments