p4pentester/Dockerfile at master · SecureWithUmer/p4pentester · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
# Use the official Kali Linux rolling image as the base
FROM kalilinux/kali-rolling

# Set environment variables to prevent interactive prompts during installation
ENV DEBIAN_FRONTEND=noninteractive

# Update package lists and install essential tools
RUN apt-get update && apt-get install -y \
    nmap \
    gobuster \
    sqlmap \
    git \
    python3-pip \
    ruby-full \
    golang \
    nikto \
    dmitry \
    netdiscover \
    exploitdb \
    john \
    hydra \
    hashcat \
    cewl \
    crunch \
    && rm -rf /var/lib/apt/lists/*

# Install Go-based tools
RUN go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
RUN go install -v github.com/ffuf/ffuf/v2@latest

# Install XSSStrike from GitHub
RUN git clone https://github.com/s0md3v/XSS-Strike.git /opt/XSS-Strike
RUN pip3 install -r /opt/XSS-Strike/requirements.txt

# Install WPScan
RUN apt-get update && apt-get install -y ruby-dev build-essential && rm -rf /var/lib/apt/lists/*
RUN gem install wpscan

# Install BeEF
RUN apt-get update && apt-get install -y beef-xss && rm -rf /var/lib/apt/lists/*
# Note: BeEF requires manual configuration and startup, which is beyond a simple symlink.
# We will provide the 'beef-xss' command for the user to start.

# Update exploit database
RUN searchsploit -u

# Create a working directory for the pentester
WORKDIR /pentest

# Create symbolic links for all installed tools in the /pentest directory for easy access
RUN ln -s /usr/bin/nmap /pentest/nmap && \
    ln -s /usr/bin/gobuster /pentest/gobuster && \
    ln -s /usr/bin/sqlmap /pentest/sqlmap && \
    ln -s /usr/bin/nikto /pentest/nikto && \
    ln -s /root/go/bin/subfinder /pentest/subfinder && \
    ln -s /root/go/bin/ffuf /pentest/ffuf && \
    ln -s /opt/XSS-Strike/xssstrike.py /pentest/xssstrike && \
    ln -s /usr/bin/theharvester /pentest/theharvester && \
    ln -s /usr/bin/dmitry /pentest/dmitry && \
    ln -s /usr/sbin/netdiscover /pentest/netdiscover && \
    ln -s /usr/bin/searchsploit /pentest/searchsploit && \
    ln -s /usr/local/bin/wpscan /pentest/wpscan && \
    ln -s /usr/bin/beef-xss /pentest/beef-xss && \
    ln -s /usr/sbin/john /pentest/john && \
    ln -s /usr/bin/hydra /pentest/hydra && \
    ln -s /usr/bin/hashcat /pentest/hashcat && \
    ln -s /usr/bin/cewl /pentest/cewl && \
    ln -s /usr/bin/crunch /pentest/crunch

# Set a default command to be executed when the container starts.
# This helps with initial connection and provides a clean prompt.
CMD ["/bin/bash"]