install_deps.sh

#!/bin/bash
# install_deps.sh — Install all WebPentest Suite v2.0.0 dependencies on Kali Linux
# ============================================================
# Installs: core tools, optional tools, Nuclei, Recon-ng,
#           SpiderFoot, Burp Suite (Community), and Go toolchain
# ============================================================

RED='\033[0;31m' GREEN='\033[0;32m' YELLOW='\033[1;33m' CYAN='\033[0;36m' RESET='\033[0m'
ok()   { echo -e "${GREEN}[+]${RESET} $1"; }
info() { echo -e "${YELLOW}[*]${RESET} $1"; }
err()  { echo -e "${RED}[-]${RESET} $1"; }
hdr()  { echo -e "\n${CYAN}──── $1 ────${RESET}"; }

[[ $EUID -ne 0 ]] && err "Run as root: sudo ./install_deps.sh" && exit 1

# ── System update ──────────────────────────────────────────────────────────
hdr "System Update"
apt-get update -qq

# ── Core required tools ────────────────────────────────────────────────────
hdr "Core Tools"
apt-get install -y -qq \
  nmap nikto gobuster whatweb \
  sqlmap hydra curl whois \
  dnsutils sslscan openssl \
  python3 python3-pip \
  git ruby-full \
  wget unzip jq

# ── Go (required for Nuclei & Subfinder) ──────────────────────────────────
hdr "Go Toolchain"
if ! command -v go &>/dev/null; then
  info "Installing Go..."
  GO_VERSION="1.22.4"
  GO_ARCH="linux-amd64"
  wget -q "https://go.dev/dl/go${GO_VERSION}.${GO_ARCH}.tar.gz" -O /tmp/go.tar.gz
  rm -rf /usr/local/go
  tar -C /usr/local -xzf /tmp/go.tar.gz
  echo 'export PATH=$PATH:/usr/local/go/bin:$HOME/go/bin' >> /etc/profile
  export PATH="$PATH:/usr/local/go/bin:$HOME/go/bin"
  ok "Go $(go version) installed"
else
  ok "Go already installed: $(go version)"
fi
export PATH="$PATH:/usr/local/go/bin:$HOME/go/bin"

# ── Subfinder ─────────────────────────────────────────────────────────────
hdr "Subfinder"
if ! command -v subfinder &>/dev/null; then
  apt-get install -y -qq subfinder 2>/dev/null || \
  GO111MODULE=on go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest 2>/dev/null
  ok "subfinder installed"
else
  ok "subfinder already installed"
fi

# ── testssl.sh ────────────────────────────────────────────────────────────
hdr "testssl.sh"
if ! command -v testssl.sh &>/dev/null; then
  git clone --depth 1 https://github.com/drwetter/testssl.sh.git /opt/testssl 2>/dev/null
  ln -sf /opt/testssl/testssl.sh /usr/local/bin/testssl.sh
  ok "testssl.sh installed → /opt/testssl/"
else
  ok "testssl.sh already installed"
fi

# ── WPScan ────────────────────────────────────────────────────────────────
hdr "WPScan"
if ! command -v wpscan &>/dev/null; then
  gem install wpscan 2>/dev/null
  ok "wpscan installed"
else
  ok "wpscan already installed"
fi

# ── JoomScan ──────────────────────────────────────────────────────────────
hdr "JoomScan"
if ! command -v joomscan &>/dev/null; then
  apt-get install -y -qq joomscan 2>/dev/null || \
  git clone https://github.com/rezasp/joomscan.git /opt/joomscan 2>/dev/null && \
  ln -sf /opt/joomscan/joomscan.pl /usr/local/bin/joomscan 2>/dev/null
  ok "joomscan installed"
else
  ok "joomscan already installed"
fi

# ── droopescan ────────────────────────────────────────────────────────────
hdr "droopescan"
if ! command -v droopescan &>/dev/null; then
  pip3 install droopescan -q 2>/dev/null
  ok "droopescan installed"
else
  ok "droopescan already installed"
fi

# ── ─────────────────────────────────────────────────────────────────────────
#    NEW IN v2.0.0
# ── ─────────────────────────────────────────────────────────────────────────

# ── Nuclei ────────────────────────────────────────────────────────────────
hdr "Nuclei (ProjectDiscovery)"
if ! command -v nuclei &>/dev/null; then
  info "Installing Nuclei via Go..."
  GO111MODULE=on go install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest 2>/dev/null
  # Copy to system path if go bin isn't in PATH for all users
  [ -f "$HOME/go/bin/nuclei" ] && cp "$HOME/go/bin/nuclei" /usr/local/bin/nuclei
  ok "nuclei installed"
else
  ok "nuclei already installed: $(nuclei -version 2>&1 | head -1)"
fi

info "Updating Nuclei templates..."
nuclei -update-templates -silent 2>/dev/null && ok "Nuclei templates updated" || warn "Could not update templates"

# ── Recon-ng ──────────────────────────────────────────────────────────────
hdr "Recon-ng"
if ! command -v recon-ng &>/dev/null; then
  apt-get install -y -qq recon-ng 2>/dev/null || {
    info "Installing recon-ng via pip3..."
    pip3 install recon-ng -q 2>/dev/null || \
    git clone https://github.com/lanmaster53/recon-ng.git /opt/recon-ng 2>/dev/null && \
    pip3 install -r /opt/recon-ng/REQUIREMENTS -q 2>/dev/null && \
    ln -sf /opt/recon-ng/recon-ng /usr/local/bin/recon-ng
  }
  ok "recon-ng installed"
else
  ok "recon-ng already installed"
fi

# Pre-install commonly used recon-ng marketplace modules
if command -v recon-ng &>/dev/null; then
  info "Installing recon-ng marketplace modules..."
  echo "marketplace install recon/domains-hosts/hackertarget
marketplace install recon/domains-hosts/certificate_transparency
marketplace install recon/hosts-hosts/resolve
marketplace install recon/domains-contacts/whois_pocs
marketplace install recon/domains-vulnerabilities/xssed
exit" | recon-ng -q 2>/dev/null || true
  ok "Recon-ng modules installed"
fi

# ── SpiderFoot ────────────────────────────────────────────────────────────
hdr "SpiderFoot"
if ! command -v spiderfoot &>/dev/null && [ ! -f /opt/spiderfoot/sfcli.py ]; then
  apt-get install -y -qq spiderfoot 2>/dev/null || {
    info "Cloning SpiderFoot from GitHub..."
    git clone https://github.com/smicallef/spiderfoot.git /opt/spiderfoot 2>/dev/null
    cd /opt/spiderfoot && pip3 install -r requirements.txt -q 2>/dev/null
    # Create wrapper script
    cat > /usr/local/bin/spiderfoot << 'SFEOF'
#!/bin/bash
python3 /opt/spiderfoot/sfcli.py "$@"
SFEOF
    chmod +x /usr/local/bin/spiderfoot
    cd - > /dev/null
  }
  ok "SpiderFoot installed → /opt/spiderfoot/"
else
  ok "SpiderFoot already installed"
fi

# ── Burp Suite Community ───────────────────────────────────────────────────
hdr "Burp Suite"
if ! command -v burpsuite &>/dev/null && [ ! -f /opt/BurpSuiteCommunity/burpsuite_community.jar ]; then
  info "Downloading Burp Suite Community Edition..."
  BURP_URL="https://portswigger.net/burp/releases/download?product=community&type=Linux"
  BURP_INSTALLER="/tmp/burpsuite_community_linux.sh"

  wget -q "$BURP_URL" -O "$BURP_INSTALLER" 2>/dev/null && \
  chmod +x "$BURP_INSTALLER" && \
  "$BURP_INSTALLER" -q 2>/dev/null && \
  ok "Burp Suite Community installed" || {
    warn "Automatic install failed — download manually:"
    warn "  https://portswigger.net/burp/communitydownload"
    warn "For Burp Suite Professional (recommended for API use):"
    warn "  https://portswigger.net/burp/pro"
  }
else
  ok "Burp Suite already installed"
fi

info "NOTE: Burp Suite REST API scanning requires Burp Suite Professional."
info "      Enable REST API: Burp > User options > REST API > Enable."
info "      Default API URL: http://127.0.0.1:1337"

# ── Wordlists ─────────────────────────────────────────────────────────────
hdr "Wordlists"
apt-get install -y -qq wordlists 2>/dev/null
[ -f /usr/share/wordlists/rockyou.txt.gz ] && \
  gunzip -f /usr/share/wordlists/rockyou.txt.gz 2>/dev/null
ok "Wordlists installed"

# ── Summary ───────────────────────────────────────────────────────────────
hdr "Installation Complete"
echo ""
ok "WebPentest Suite v2.0.0 dependencies installed!"
echo ""
echo "  Installed tools:"
for tool in nmap curl nikto gobuster whatweb sqlmap subfinder nuclei recon-ng spiderfoot burpsuite testssl.sh wpscan joomscan droopescan; do
  command -v "$tool" &>/dev/null && echo -e "    ${GREEN}✓${RESET} $tool" || echo -e "    ${RED}✗${RESET} $tool (not in PATH)"
done
echo ""
echo "  Run the suite:  ./webpentest.sh -t https://target.com"
echo "  Quick scan:     ./webpentest.sh -t https://target.com --quick"
echo "  With Burp API:  ./webpentest.sh -t https://target.com --burp-api http://127.0.0.1:1337"
echo ""