NoirGate provides on-demand ephemeral anonymous shells secured by TOTP. Try Me! -
Text HOW to 1-337-561-1337
There are often times while conducting security research where you need a quick disposable terminal environment to validate findings or conduct research anonymously. Noirgate provides on-demand web sandboxes running Tor, and DNS over TLS for layer-7 anonymity.
- Multiple-API Endpoints (SMS, REST, ChatOps)
- Network controls
- DNS over TLS
- Torsocks + Privoxy
- Container controls
- Low-Privilege Container user
- Dangerous capabilities removed
- Limits imposed via ulimit
- Host controls
- Isolated client, and management networks
- Restrictions on metadata interfaces
- Noirgate-Manager - Lifecycle management and control for noirgate-shell containers
- Noirgate-Procurement - Discord/Slack bot for Chatops integration
- Noirgate-DiscoDNS - Noirgate Shell DNS server
- Noirgate-Shell - Base Noirgate container containing the tools below
- Cloud provider clients
- Offensive security tools
- Defense security tools
- Developer tools
- AWS Account
- IAM role to deploy the terraform code
- Twilio API Key (optional)
- Valid x509 Certificate (not self-signed)
- Terraform
- Docker-Compose
- x86_64 host
- Clone the repo locally
git clone https://github.com/Shell-Company/noirgate-public
- Build the Noirgate host
cd noirgate-public/noirgate-terraform && terraform apply
Wait for terraform build to complete and ssh into the noirgate-host using the provided PEM file
- Set environment variables below on the host
TWILIO_SID - Twilio account ID
TWILIO_TOKEN - Twilio Secret
TWILIO_NUMBER - Twilio Phone Number
AWS_ACCESS_KEY_ID - access key
AWS_SECRET_ACCESS_KEY - secret
NOIRGATE_BOT_TOKEN - Discord bot token
- Same as above
- Follow step #3 from above
- Run docker-compose-no-sms.yml
sudo -E docker-compose -f ./noirgate-compose/docker-compose-no-sms.yml up
- Add instructions for deploying on Kubernetes
- Add server secret validation for discord bots and rest API
This software is provided as is without any warranty of any kind, and is currently a work in progress.