pentest-toolbox/Dockerfile at master · piotrcki/pentest-toolbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
#   Copyright (C) 2021 Piotr Chmielnicki
#
#   This program is free software; you can redistribute it and/or modify
#   it under the terms of the GNU General Public License as published by
#   the Free Software Foundation; either version 3 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU General Public License for more details.
#
#   You should have received a copy of the GNU General Public License
#   along with this program; if not, write to the Free Software Foundation,
#   Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301  USA

FROM kalilinux/kali-rolling

ADD --chown=root:root sources.list /etc/apt/
RUN chmod 0644 /etc/apt/sources.list

RUN DEBIAN_FRONTEND=noninteractive apt-get update -y \
    && DEBIAN_FRONTEND=noninteractive apt-get install apt-utils -y \
    && DEBIAN_FRONTEND=noninteractive apt-get dist-upgrade -y \
    && echo "wireshark-common wireshark-common/install-setuid boolean false" \
    | debconf-set-selections \
    && DEBIAN_FRONTEND=noninteractive apt-get install \
    afl++ \
    aircrack-ng \
    arp-scan \
    awscli \
    bash-completion \
    binwalk \
    bloodhound \
    build-essential \
    bwm-ng \
    dirb \
    dnsmap \
    dnsutils \
    dsniff \
    ettercap-text-only \
    geoip-bin \
    git \
    hashcat \
    hping3 \
    htop \
    hydra \
    iproute2 \
    iputils-ping \
    john \
    libldap2-dev \
    libsasl2-dev \
    libssl-dev \
    man-db \
    masscan \
    metasploit-framework \
    miscfiles \
    mitmproxy \
    most \
    nikto \
    nmap \
    nuclei \
    openssl \
    pipx \
    plocate \
    proxychains4 \
    python2 \
    python3 \
    python3-dev \
    radare2 \
    scapy \
    screen \
    socat \
    sqlmap \
    sslscan \
    stunnel4 \
    subversion \
    tcptraceroute \
    termshark \
    testdisk \
    theharvester \
    traceroute \
    tshark \
    vim \
    whois \
    wpscan \
    xz-utils \
    -y \
    && DEBIAN_FRONTEND=noninteractive apt-get clean -y \
    && ln -s /usr/bin/batcat /usr/local/bin/bat \
    && rm -rf /var/log/*

RUN PIPX_HOME=/usr/local/lib/pipx PIPX_BIN_DIR=/usr/local/bin pipx install httpie
RUN PIPX_HOME=/usr/local/lib/pipx PIPX_BIN_DIR=/usr/local/bin pipx install lsassy
RUN PIPX_HOME=/usr/local/lib/pipx PIPX_BIN_DIR=/usr/local/bin pipx install sprayhound

RUN cd /usr/share/ && git clone https://github.com/SpiderLabs/Responder/
RUN cd /usr/share/ && git clone https://github.com/Hackndo/pyGPOAbuse

RUN cd /tmp/ && git clone https://github.com/SecureAuthCorp/impacket && cd impacket \
    && PIPX_HOME=/usr/local/lib/pipx PIPX_BIN_DIR=/usr/local/bin pipx install . && cd .. && rm -r impacket

RUN cd /tmp/ && git clone https://github.com/robertdavidgraham/rdpscan \
    && cd rdpscan &&  make && cp -a rdpscan /usr/local/bin && cd .. && rm -r rdpscan

ADD --chown=root:root piotrcki-wordlist-top10m.txt.xz /usr/share/dict/
RUN unxz /usr/share/dict/piotrcki-wordlist-top10m.txt.xz \
    && chmod 0444 /usr/share/dict/piotrcki-wordlist-top10m.txt

RUN echo '# [piotrcki/pentest-toolbox] Setup defaults\nexport PAGER=most\nexport EDITOR=vim' >> /root/.bashrc