Hacking

Docker containers have become so ubiquitous sometimes respected security professionals tweet ridiculous  things like: docker run -u zap -p 8080:8080 -p 8090:8090 -i owasp/zap2docker-stable zap-webswing.sh http://localhost:8080/?anonym=true&app=ZAP — Jerry Gamblin (@JGamblin) June 7, 2016 …but it is 2016 and you should never run code on your machine if you don’t know what it does.  These are mini-virtual machines … Read more

I built a simple TOR  socks proxy container today to be able to easily use TOR to machines I am working on. Getting it to run is as simple as: docker run –name tor -ti -p 9050:9050 jgamblin/tor This will run it as a daemon: docker run –name tor -ti -p 9050:9050 jgamblin/tor From there all you … Read more

My favorite open source tool for analyzing PCAP files is CapAnalysis  and I have always kept a virtual machine around to run this software but I have been on a kick of containerizing all my favorite tools recently so I decided to put CapAnalysis into a container. It allows you to easily visualize the traffic flow, statistics, geolocation and … Read more

I always do this… I wrote KaliBrowser over the weekend and today at lunch I was thinking this same setup would be really handy to use with Burp so I put together BurpBrowser that lets you run Burp and Firefox in a browser. It runs the following packages: Ubuntu 16.04 Burp Proxy Firefox OpenBox NoVNC  Getting started is … Read more

I have been spending some time recently getting up to speed on Docker so this weekend I built KaliBrowser: It runs the following packages: Kali Docker OpenBox NoVNC  Getting started is as easy as: docker run -d -t -i -p 6080:6080 jgamblin/kalibrowser and then point your favorite browser to: http://ip:6080 To keep this image as small … Read more