/p0wn-box

Primary LanguageDockerfileMIT LicenseMIT

p0wn-box

Purpose

This Dockerfile builds a Debian-based Docker container with a bunch of pentesting tools installed.

A quick and easy way to deploy a pentesting platform on any box, including Linux, MacOS or Windows!

Tools installed:

  • dirb
  • john
  • p0f
  • patator
  • dotdotpwn
  • enum4linux
  • dnsenum
  • smtp-user-enum
  • hydra
  • wpscan
  • snmpcheck
  • wafw00f
  • medusa
  • hping3
  • crunch
  • setoolkit
  • metasploit
  • httrack
  • SQLmap
  • nmap
  • SSLscan
  • joomscan
  • theharvester
  • tcpdump
  • openvpn
  • nikto
  • telnet
  • proxychains
  • htop
  • DNS SOCKS Proxy

It also includes:

  • Wordlists from Kali Linux
  • Webshells from Kali Linux
  • A binary folder, allowing to easily run each binary independently
  • fish shell & tmux

Prebuild image

You can pull the official image from the dockerhub registry using the following command:

docker pull nitr4x/reversing

Build

To build the container, just use this command:

docker build -t pentest .

Docker will download the Debian image and then execute the installation steps.

Be patient, the process can be quite long the first time.

Note that you may want to:

  • If you wish to change the container name, please, run the script rename.sh in order to update the bin folder.
  • To easily access each command, add the bin folder to your environment PATH.

Run

Once the build process is over, get and enjoy your tools as you were on a virtual machine !

sudo docker run -td -p 0.0.0.0:9990-9999:9990-9999 -v ~/p0wnM3/:/tmp/data --name pentest pentest

Explanations:

  • We map the port range from 9990 to 9999 to our host (useful for reverse tcp connexion)
  • We mount a shared folder to simplify the data exchange between the container and the host

Of course, it is up to you to adjust it to your taste or need.