RedBoard - Collaborative Web Dashboard for RedTeam Pentesters

Features

• store your pentest data and sort it by category
• keep track of your actions with the items history chart
• create a network map
• animated map with slider bar
• network map have display mode
• create multi-user
• have a full text search engine
• have a ranking system

This tool is developed in nodeJS and use Mongo as a database backend.

Installation
Install nodeJS and mongodb (ubuntu based):

sudo apt install mongodb-clients nodejs-legacy npm

You must have mongo >= 3.0 for the search engine to work. You can manually install it by using this good link :

https://docs.mongodb.com/manual/tutorial/install-mongodb-on-ubuntu/

npm dependencies:

npm install

Start RedBoard using

npm start

To create first admin account

mongo

use redboard

db.users.insert({"local" : { "password" : "$2a$08$3LhTS4rfimX47BG4ghEZ1u3jEUG1/QEqdHzUacTXkdpstn1lWEOCG", "username" : "admin", "isAdmin" : true}}) 

This command create admin account with login : admin and password : redboard (in bcrypt).

Configuration

Certificate
You can generate your self signed ssl certificate with this command. Put this three files into ssl directory.

openssl genrsa 1024 > file.pem

openssl req -new -key file.pem -out csr.pem

openssl x509 -req -days 900 -in csr.pem -signkey file.pem -out file.crt

Server
You can change default server port and listen ip by editing 'server.js' (on top file)

var portSSL = 8443; 
var host    = "127.0.0.1";

Database
You can change database config by editing 'config/database.js'

Usage
RedBoard works with "items". Items can be created, edited or deleted. Each item has it category and subcategory.
Current categories are : Vulnerabilities, Hosts, Passwords, Backdoors, Tips and Resources.
Some subcategories are already set in Tips (Network, Windows, Linux, Web, DB, Tools, Appliance, Exploit, Other) and Resources (VPS, Certificate, DNS) categories.
You can create new subcategories by clicking on "New" in categorie. This will add a shortcut to the new subcategory in the dashboard to facilitate the future addition of items in this subcategory.


Users
Create new user in menu Users -> Create New
Add name, password, admin flag or not. With admin flag, user can manage users.
You can delete user in menu Users -> Show All
Only users with admin rights can show and use this menu.

Items

Show
You can show item content by clicking on "View Details" button in dashboard on category.
Then click "edit" on item.
You can show all items (not filter by categories) with menu Items -> Show All.
And sort them by subcategories.

Add
You can add item by clicking on shortcut subcategory name under category.

Vulnerabilities category
You can add Vulnerabilities with description and attach files. You can also attach it to host or other items.

Hosts category
In Host category you can set the "Draw" parameter to add it to the network map.
If the "Owned" parameter is set, the current item will be displayed without gray on the map.
Operating system can be choose to host this will change host icon on map.
Different hosts may be graphically linked together on the map by adding an "Attach Item".
Finally, all hosts within the same subcategory are drawed in the same network.

Passwords category
You can add passwords list or dump and attach files. You can also attach it to host or other items.

Backdoors category
In this category you can create item backdoor and attach backdoors to host. If you attach backdoor to an host, on draw map a white strip on right top of this host is add.

Tips category
In this category you can note tips or tricks find during your audit and attach it to an other item or not.

Resources category
In this category you can add all the resources you will need during your audit. (VPN servers, DNS records, SSL certificates ...).

Custom category
If you do not find the category adapted to your data you can create custom category by clicking on "Create Custom Item". You will not be able to see it on the dashboard but you can access it by clicking on "Show Custom Items".

Hosts map
Hosts on map could be double click to be edited.
If a backdoor is attached to a host when you double click on host you go to edit backdoor item.
Network map can be exported as a png file by clicking on "Download" button.
Default positions on the map are automatically calculated by Readboard. Hosts positions might be changed by using a drag and drop and then saved into the database using the "Position snapshot" button. Default positions could be restored by using the "Reset" button.
A full screen mode can be used to facilitate your presentation by cliking on "Fullscreen" button on right top.
The slide bar can be used to see the state of the network scheme at a selected date. Ticks on the slide bar represent the days when there was activity (when items are create or update groups by days). You can also use media button to animate the map.


Items History chart
With this chart, you can inspect created or edited items over the days. You may also display items filtered by date by clicking on link on the chart.


Search
To search globaly use search form on right top of web page.
To add filter to your search use menu search.
You can filter by items categories or files.

Ranking
This menu is only there for the games. You can see the Hunter who created the most item. And a ranking by subcategories.


Other

Backup - Restore
Projects might be backuped using the following command:

mongodump --db redboard

If you want to restore your mongodb projects, you shall use this command:

mongorestore --db redboard dump/redboard

Offline use
You can use RedBoard offline. Run

npm install

command online. This command create "node_modules" folder in your redboard directory with all RedBoard dependency.
Then you can copy all Redboard directory with this folder and use it offline (without repeating this step of the installation).