offensive-docker

Offensive Docker is an image with the more used tools to create an pentest environment easily and quickly.

➡️ Note: Check out the next repo to know how to launch offensive docker in a VPS in Google Cloud Platform or Digital Ocean (free credit included). Offensive Docker VPS

Table of Contents

• Links
• Features
• Requirements
• Tools installed
  • Operative system tools
  • Network tools
  • Developer tools
  • 🔪 Offensive tools
    • Port scanning
    • 🔍 Recon
      • Subdomains
      • Subdomain takeover
      • DNS Lookups
      • 📷 Screenshot
      • 🕸️ Crawler
      • 📁 Search directories
      • Fuzzer
      • Web Scanning
      • CMS
      • Search JS
    • Wordlist
    • Git repositories
    • OWASP
    • 📱 Mobile
    • Brute force
    • Cracking
    • OS Enumeration
    • Exploits
    • Windows
    • Reverse shell
    • Other resources
  • Forensic
  • Custom functions
  • Other services
  • Reporting tools
• 📝 Documentation
• 🛠️ Usage
  • Option 1 - Use the github repository
  • Option 2 - Use the image from docker hub
  • Considerations to run the container
• ⚙️ Nice configurations
  • 1. Configure credentials in the docker
  • 2. Alias to connect to HTB (Hack the Box) VPN
    • Option 1 - HTB VPN using github repository
    • Option 2 - HTB VPN using docker hub image
  • 3. Save and load command history in your local environment
    • Option 1 - Command history using github repository
    • Option 2 - Command history using docker hub image
• ✅ Environment tested
• ⚠️ Warning
• ☕ Donations
• Contributors
• Contributing
• 📈 Stargazers over time
• License

Links

• 🎬 Video: Demos
• 💬 Chat: Discord
• 🌟 VPS Automation
• 👉 Advanced configurations

Features

• OS, networking, developing and pentesting tools installed.
• Connection to HTB (Hack the Box) vpn to access HTB machines.
• Popular wordlists installed: SecLists, dirb, dirbuster, fuzzdb, wfuzz and rockyou.
• Proxy service to send traffic from any browsers and burp suite installed in your local directory.
• Exploit database installed.
• Tool for cracking password.
• Linux enumeration tools installed.
• Tools installed to discovery services running.
• Tools installed to directory fuzzing.
• Monitor for linux processes without root permissions
• Zsh shell installed.

Requirements

• Docker service installed

Tools installed

Operative system tools

• rdate
• vim
• zsh
• oh-my-zsh
• locate
• cifs-utils
• htop
• tree
• gotop
• fcrackzip

Network tools

• traceroute
• telnet
• net-tools
• iputils-ping
• tcpdump
• openvpn
• whois
• host
• prips
• dig

Developer tools

• git
• curl
• wget
• ruby
• go
• python
• python-pip
• python3
• python3-pip
• php
• aws-cli
• tojson
• nodejs

🔪 Offensive tools

Port scanning

• nmap
• masscan
• naabu

🔍 Recon

Subdomains

• Amass
• GoBuster
• Knock
• MassDNS
• Altdns
• spyse
• Sublist3r
• findomain
• subfinder
• spiderfoot
• haktldextract

Subdomain takeover