Desarrollo de un sistema de gestión web prototipo para la automatización de hackeo ético en sistemas operativos Windows.

Abstract

In this degree project, a Web management prototype was developed for the automation of Ethical Hacking in Windows Operating Systems. In chapter 1 a theoretical review of the OSSTMM methodology used for ethical hacking and RAD development methodology implemented for the programming of the Web management is carried out. In addition, it is briefly explained about the applied tools such as: NMAP, CVE-Search, Metasploit, PowerShell and Python libraries. In chapter 2 the design of the application prototype is carried out by the analysis of functional and non-functional requirements, modules, use case diagrams, activities and classes, user stories, interface sketches and the prototype architecture. Additionally, the implementation of the prototype is explained by the creation of virtual machines for Kali Linux and Windows Server 2008 exploitable. The installation of VsCode, LAMPP, CVE-Search, Flask, PYNMAP, PDFKIT, PYMETASPLOIT, PYPSRP.POWERSHELL and PYPSRP.WSMAN is briefly explained. The coding of the database and the Web application with its different modules is detailed. Finally, Chapter 3 shows the evaluation of the prototypes and the application tests.