Patronus

Patronus was designed with penetration testers in mind! This dynamic tool captures command line inputs during security assessments, meticulously redacts any sensitive information, and organizes the data by command type. All the organized commands are then displayed through a user-friendly, interactive web interface, making it easy to review and manage. With Patronus, penetration testers can cast away the shadows of data mishandling and ensure a secure and streamlined workflow.

This tool is still a work in progress, any feedback is welcomed

Usage

Install with pipx

pipx install git+https://github.com/Michaeladsl/Patronusx

When performing the on command for the first time, if Asciinema is not installed it will download it for you.

Configure your zsh environment for automatic recordings.

patronus on

patronus off

By default, patronus will run the redact, split, and server scripts. This redacts any recordings in the full directory, splits the newly redacted files into individual command recordings, and launches the flask server.

patronus

The web browser easily sorts by command and allows the user to delete the recording or copy any text out of the displayed recording and redact that information.

Patronus allows for individual running of tools

patronus --run redact,split,server,config

Recordings

The scripts look for the necessary files in the static directory when running. If configuring outside of using the 'on' option, make sure the full scritps are stored in static/full and create the static/redacted_full and the static/splits directories.