Curiosity in Practice
jgamblin While getting ready to teach an “introduction to penetration testing with docker ” class I stumbled across the Shipyard-Project which brings an amazing web based interface to docker. Installing on Debian on DigitalOcean is as simple as starting a droplet and running these two commands: curl -sSL https://get.docker.com/ | sh curl -sSL https://shipyard-project.com/deploy | bash -s Update: Running scripts … Read more
Docker containers have become so ubiquitous sometimes respected security professionals tweet ridiculous things like: docker run -u zap -p 8080:8080 -p 8090:8090 -i owasp/zap2docker-stable zap-webswing.sh http://localhost:8080/?anonym=true&app=ZAP — Jerry Gamblin (@JGamblin) June 7, 2016 …but it is 2016 and you should never run code on your machine if you don’t know what it does. These are mini-virtual machines … Read more
I built a simple TOR socks proxy container today to be able to easily use TOR to machines I am working on. Getting it to run is as simple as: docker run –name tor -ti -p 9050:9050 jgamblin/tor This will run it as a daemon: docker run –name tor -ti -p 9050:9050 jgamblin/tor From there all you … Read more
My favorite open source tool for analyzing PCAP files is CapAnalysis and I have always kept a virtual machine around to run this software but I have been on a kick of containerizing all my favorite tools recently so I decided to put CapAnalysis into a container. It allows you to easily visualize the traffic flow, statistics, geolocation and … Read more
I always do this… I wrote KaliBrowser over the weekend and today at lunch I was thinking this same setup would be really handy to use with Burp so I put together BurpBrowser that lets you run Burp and Firefox in a browser. It runs the following packages: Ubuntu 16.04 Burp Proxy Firefox OpenBox NoVNC Getting started is … Read more