GitPlanet

Cheap and reliable Node.js hosting starts at $3/month, and $1/month static HTML hosting

Created with love in Canada, visit hostnodejs.com today

Feel like to post an Ad? Learn Details
All Projects → cr0hn → Dockerscan

cr0hn / Dockerscan

Licence: other
Docker security analysis & hacking tools

Programming Languages

python
139335 projects - #7 most used programming language

Labels

dockersecurityhackingregistrydocker-registryscan

Projects that are alternatives of or similar to Dockerscan

Proton
Proton Framework is a Windows post-exploitation framework similar to other Windows post-exploitation frameworks. The major difference is that the Proton Framework does most of its operations using Windows Script Host, with compatibility in the core to support a default installation of Windows 2000 with no service packs all the way through Windows 10.
Stars: ✭ 142 (-86.42%)
Mutual labels:  registry, hacking
craneoperator
Gives you a simple web interface for browsing around a Docker Registry
Stars: ✭ 116 (-88.91%)
Mutual labels:  registry, docker-registry
Pierone
STUPS' Docker registry with S3 backend, immutable tags and SCM source tracking
Stars: ✭ 57 (-94.55%)
Mutual labels:  registry, docker-registry
cleanreg
A small tool to clean up Docker Registries (v2).
Stars: ✭ 48 (-95.41%)
Mutual labels:  registry, docker-registry
Registry Cli
Scripts for easy manipulation of docker-registry from command line (and from scripts)
Stars: ✭ 609 (-41.78%)
Mutual labels:  registry, docker-registry
Search Docker Registry V2 Script.1.0
view-private-registry is a simple bash script for listing images in a private registry v2, docker search registry-v2
Stars: ✭ 34 (-96.75%)
Mutual labels:  registry, docker-registry
Login Action
GitHub Action to login against a Docker registry
Stars: ✭ 149 (-85.76%)
Mutual labels:  registry, docker-registry
ttl.sh
An anonymous & ephemeral Docker image registry
Stars: ✭ 107 (-89.77%)
Mutual labels:  registry, docker-registry
Dockercheatsheet
🐋 Docker Cheat Sheet 🐋
Stars: ✭ 3,301 (+215.58%)
Mutual labels:  registry, docker-registry
Docker Registry Ui
The simplest and most complete UI for your private registry
Stars: ✭ 756 (-27.72%)
Mutual labels:  registry, docker-registry
Docker registry cli
Docker Registry CLI - Provides search functionality for Docker Registry (UI and CLI)
Stars: ✭ 48 (-95.41%)
Mutual labels:  registry, docker-registry
Usb Keystroke Injector
☠️ An Arduino-based USB keyboard simulator which injects keystrokes via Bluetooth protocol or predefined payloads in a SD card.
Stars: ✭ 42 (-95.98%)
Mutual labels:  hacking
Verdaccio Ldap
LDAP auth plugin for verdaccio
Stars: ✭ 39 (-96.27%)
Mutual labels:  registry
Scan Tensorflow
A Tensorflow implementation of DeepMind's Symbol-Concept Association Network(SCAN: Learning Abstract Hierarchical Compositional Visual Concepts)
Stars: ✭ 39 (-96.27%)
Mutual labels:  scan
Regslscan
A tool for scanning registery key permissions. Find where non-admins can create symbolic links.
Stars: ✭ 39 (-96.27%)
Mutual labels:  registry
Tweak Series
Repo for YouTube series
Stars: ✭ 44 (-95.79%)
Mutual labels:  hacking
Keylogger
A simple keylogger for Windows, Linux and Mac
Stars: ✭ 1,007 (-3.73%)
Mutual labels:  hacking
Swift Keylogger
Keylogger for mac written in Swift using HID
Stars: ✭ 995 (-4.88%)
Mutual labels:  hacking
Powerladon
Ladon Network Penetration Scanner for PowerShell, vulnerability / exploit / detection / MS17010/SmbGhost,Brute-Force SMB/IPC/WMI/NBT/SSH/FTP/MSSQL/MYSQL/ORACLE/VNC
Stars: ✭ 39 (-96.27%)
Mutual labels:  hacking
Holisticinfosec For Webdevelopers Fascicle0
📚 Overview 🔒 Tooling 🔒 Process 🔒 Physical 🔒 People 📚
Stars: ✭ 37 (-96.46%)
Mutual labels:  hacking
View All Similar Projects ➔

dockerscan

dockerscan: A Docker analysis & hacking tools

.. image:: https://github.com/cr0hn/dockerscan/raw/master/doc/source/_static/dockerscan-logo.png :height: 64px :width: 64px :alt: DockerScan logo

+----------------+--------------------------------------------------+ |Project site | http://github.com/cr0hn/dockerscan | +----------------+--------------------------------------------------+ |Issues | https://github.com/cr0hn/dockerscan/issues/ | +----------------+--------------------------------------------------+ |Author | Daniel Garcia (cr0hn) / Roberto Munoz (robskye) | +----------------+--------------------------------------------------+ |Documentation | http://dockerscan.readthedocs.org | +----------------+--------------------------------------------------+ |Last Version | 1.0.0-Alpha-02 | +----------------+--------------------------------------------------+ |Python versions | 3.5 or above | +----------------+--------------------------------------------------+

Support this project

Support this project (to solve issues, new features...) by applying the Github "Sponsor" button.

What's dockerscan

A Docker analysis tools

Very quick install

.. code-block:: bash

> python3.5 -m pip install -U pip
> python3.5 -m pip install dockerscan

Show options:

.. code-block:: bash

> dockerscan -h

Available actions

Currently Docker Scan support these actions:

  • Scan: Scan a network trying to locate Docker Registries

  • Registry

    • Delete: Delete remote image / tag
    • Info: Show info from remote registry
    • Push: Push an image (like Docker client)
    • Upload: Upload a random file

  • Image

    • Analyze: Looking for sensitive information in a Docker image.

      • Looking for passwords in environment vars.
      • Try to find any URL / IP in the environment vars.
      • Try to deduce the user used internally to run the software. This is not trivial. If the entry point is a .sh file. Read the file and try to find call to sudo-like: “sudo”, “gosu”, “sh -u”… And report the user found.

    • Extract: extract a docker image

    • Info: Get a image meta information

    • Modify:

      • entrypoint: change the entrypoint in a docker
      • trojanize: inject a reverser shell into a docker image
      • user: change running user in a docker image

What's the difference from Clair or Docker Cloud?

The purpose of Dockerscan is different. It's foccussed in the attack phase.

Although Dockescan has some functionalities to detect vulnerabilities in Docker images and Docker registries, the objective is the attack.

Documentation

Documentation is still in progress... sorry!

For the moment we only have the slides presented at RootedCON Spain, the conference where Docker Scan was presented:

https://www.slideshare.net/cr0hn/rootedcon-2017-docker-might-not-be-your-friend-trojanizing-docker-images/1

Or you can watch it in video format (recommended):

https://youtu.be/OwX1e4y4JMk

Also, you can watch a dockerscan usage demo:

https://youtu.be/UvtBGIb3E3o

Contributing

Any collaboration is welcome!

There are many tasks to do. You can check the Issues <https://github.com/cr0hn/dockerscan/issues/>_ and send us a Pull Request.

License

This project is distributed under BSD license <https://github.com/cr0hn/dockerscan/blob/master/LICENSE>_

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].