[Community tips] Use the Parrot Alternate Installer

Posted on Posted in tips

We all want that nice little prompt of a reverse shell. Which requires a dedicated IP or a host that doesn’t filtered a lot custom ports that we define.

Not a lot of ISP’s provide dedicated IP for cheap for resident Internet users. And it’s never a wise idea to disable port filtering on home routers/firewalls. And worse, our connection could drop any time and get it back with a new IP. All our hard work goes to waste. Back to the drawing board.

That’s where parrot OS cloud edition comes to play. Now, cloud hosting providers doesn’t exactly give you Parrot OS as your choice of OS to install on a VPS. However, the beauty of Parrot OS Cloud edition is you can literally change any Debian based OS in to a Parrot OS Cloud.

A cheap $5 a month VPS can be tuned to run Parrot OS and all of it’s excellent tools. A VPS with Parrot OS and unfiltered bandwidth is a hackers dream.

I personally recommend the cloud hosting platforms by the sponsoring Parrot OS Dasaweb.

But for those who are on a tighter budget any VPS with debian installed with root access will do. This article is done on Digital Ocean $5 VPS running debian 8.

Lets start:

Step 1:

First SSH to the VPS.

Launch a terminal and issue “ssh [email protected]

root’ being being the user we wish to login to the VPS with and parrot.souley.org as the host for this article.

You can replace with the ip as “ssh [email protected]

shfx

Issuing the command “lsb_release -a” and “cat /etc/os-release” confirms us that we’re running Debian Stable.

shfx

Step 2:

We’ll be using a script called “Install-parrot.sh”. It’s a wonderful alternative script developed by the our developers to turn any Debian based system in to Parrot OS. And with its wonderful tools and other tweaks.

Using this script, we have different options to choose from:

  1. Core – Just the core tweaks and tools

  1. Cloud Editions – All the tools and tweaks for a cloud system. Perfect for this article. No GUI and No forensic and wifi tools. Just what you need for a system on the cloud and that you ssh in to.

  1. Standard Edition – Standard Parrot OS with it’s themes, tweaks and standard tools.

  1. Full Edition – Full blown Parrot OS with all the tools. You wouldn’t want this on the cloud system. You’ll be just wasting extra storage space.

  1. Home Edition – Parrot OS with basic and few tools.

  1. Embedded Edition – Design specifically for embedded systems (Raspberry pi).

Before we continue any further, there is however an alternative none-intractive cloud installer script that does install Parrot OS to a cloud VPS.

I choose “Install-parrot.sh” script due to the fact that it gives more choices and control to the user.

Wget the script to the VPS.

wget https://raw.githubusercontent.com/ParrotSec/alternate-install/master/parrot-install.sh

Once the file has been downloaded to the VPS host, we will make the file as an executable by issuing the command:

chmod a+x parrot-install.sh

shfx

Step 3:

And finally, run the script as:

./parrot-install.sh

Once the script executes, it will prompt you to choose which Parrot installation option we prefer.

Select option 2: Install Cloud Edition

shfx

Once you select the option 2; The script makes the necessary changes to the source files in /etc/apt/source.lst and it begins installing itself on top of the existing Debian installion.

shfx

You will be prompted with few user inputs.

Just select <OK> the script will handle the rest.

shfx

If you see this message, I’d recommend you select “Y” to install the package maintainers version. This make sure any modification done to the current installation is overwritten by the package maintainers version. It’s going to take few minutes. Downloading all the tools and installing it all. But then again, the connection is so much faster than an average home connection.

Finally.

shfx

Installation complete.

Just to confirm with the issue the command “lsb_release -a” and “cat /etc/os-release”

shfx

All the tools you’d normally use within a terminal shell is now installed and ready to use

shfx

Now remember, in tools such as metasploit, your LHOST will now be the IP address of the VPS. And that’s all there is to it.

Happy hacking!

@Souley (Parrot Ambassador)