micro-joan / blackstone

Pentesting Reporting Tool

My website: https://microjoan.com
My blog: https://darkhacking.es/
Use and installation video: https://youtu.be/qasPlaaYxiU
Buy me a coffee: https://www.buymeacoffee.com/microjoan

---

BlackStone Project 2.0 (For Kali Linux)

BlackStone project or "BlackStone Project" is a tool created in order to automate the work of drafting and submitting a report on audits of ethical hacking or pentesting.

In this tool we can register in the database the vulnerabilities that we find in the audit, classifying them by internal, external audit or wifi, in addition, we can put your description and recommendation, as well as the level of severity and effort for its correction. This information will then help us generate in the report a criticality table as a global summary of the vulnerabilities found.

We can also register a company and, just by adding its web page, the tool will be able to find subdomains, telephone numbers, social networks, employee emails...

Install BlackStone

Step 1

cd /opt
git clone https://github.com/micro-joan/BlackStone
cd BlackStone
chmod +x installer.sh
./installer.sh

The application will start automatically but if you log in you will get the 500 error so you must reboot the system and run the installer a second time (this is normal)

Step 2

(reboot system)
cd /opt/blackstone
./installer.sh

USE

Once the installation is complete you can use blackstone from the terminal (with root):

blackstone

Or you can also look for the icon in the system:

LOGIN

User: blackstone

Password: blackstone

Latest news

• Own and automated installer for deployment of BlackStone in Kali Linux.
• Replace Hunter.io results with similar results native to the app.
• Fixed numerous fields sensitive to stored XSS.
• Limitation of access to the BlackStone app only to the computer that runs it (no one on your network that detects your port 80 raised will be able to access this app).
• Insert logo image for each of the clients, instead of automatic logo by favicon (good results were not achieved).
• Automatic subdomain search in the client file, this functionality is native to the BlackStone code itself).
• Fixed various Spanish/English translations.
• System icon integration for BlackStone, the app is added in Kali as a native app with its own launcher.

Use

After having vulnerabilities in the database, we will go to the audited client and we will register a client along with their web page, once registered we can go to customer details and we can see the following information:

THE USE OF THIS APPLICATION IS FOR PROFESSIONAL USE, THE AUTHOR IS NOT RESPONSIBLE FOR A MISUSE EMPLOYED

• Subdomains of the website as well as information of interest found in google
• Emails of company workers or SMTP servers

Once we have the company that we are going to audit registered in the database, we will create a report, adding the date, name of the report and the company to which will be audited. When we register the report, we will give it edit and then we will select the vulnerabilities that we want to appear in the report:

Finally, we will generate the report by clicking on the "overview report" button, and later we will save the page that is generated as ".mht", then we will open it with Word to be able to work on the generated report:

Support Blackstone

blackstone's Issues

No renderiza las imagenes

Hola! te quería comentar que a la hora de attachear no renderiza las imagenes, y no estoy seguro si es porque falta alguna especie de libreria que tome attachments desde fuera del localhost hacia el servidor, pues yo levanto la app desde el docker y attacho las imagenes desde mi sistema operativo host que es windows 10.

Unable to save the report sa .mht file

(using in kali) im currently unable to save the report as a .mht file to being able to work on it. using firefox but also tried on chrome and also on the my host machine (win)

Who to contact for security issues

Hello 👋

I run a security community that finds and fixes vulnerabilities in OSS. A researcher (@und3sc0n0c1d0) has found a potential issue, which I would be eager to share with you.

Could you add a SECURITY.md file with an e-mail address for me to send further details to? GitHub recommends a security policy to ensure issues are responsibly disclosed, and it would help direct researchers in the future.

Looking forward to hearing from you 👍

(cc @huntr-helper)

Installing DB Issue

Once the database is installed, there is no application available. It goes through the whole installation but the icon nor the application will be available in either the terminal or GUI.

Heroku Support

Hi can you add app.json or something so it's heroku deployble?

Kali error

Hola, he seguido los pasos que indicas, pero al parecer no instala el Xammp en mi Kali y no se porque, al abrirse el navegador, me dice que no hay conexion con el localhost.
punto 2. lo hice como root, no se si estara bien.
punto 3, he notado que cuando hago el clone, luego de instalar la primera vez, no me deja entrar a la carpéta Blackstone en opt, me dice que no existe o que no es una carpeta, pero cuando abro el mc, puedo entrar y hasta ejecutar nuevamente el installer.

Saludos!

Access only to localhost

Hello

after installation, blackstone opens in browser and shows message "Access only to localhost"

whats wrong? what did I missed?