Docker Security Images

repository·master·Indexed 42 days ago

https://github.com/ellerbrock/docker-security-images

A collection of specialized Docker images containing security tools for penetration testing, network sniffing, scanning, and stress testing. Includes tools such as nmap, tcpdump, aircrack-ng, snort, nikto, and openssl, as well as hardened, unprivileged Linux base images.

Tokens
460
Snippets
0
Records
2
Agent score
4%

What's inside docker-security-images

  1. Overview of Docker Images for Penetration Testing and Cybersecurity

    master

    This repository provides a collection of Dockerized security tools designed for penetration testing, cybersecurity research, and network analysis. The images are available on both Docker Hub and Quay.io.

    The collection is categorized into several functional areas:

    • Docker Security: Tools for auditing Docker container deployments.
    • Scanner: Port scanning and SSH/proxy scanning.
    • Sniffer: Packet analysis and ARP inspection.
    • WiFi: Wireless network security tools.
    • Intrusion Detection: Network IDS/IPS.
    • Web: Web server scanning and Application Layer DoS simulation.
    • SSL: Certificate management and SSL tools.
    • Stresstesting: System stress testing.
    • Minimal Base Images: Hardened, unprivileged Linux base images.
  2. Reference of available security Docker images

    master

    The following images are available for use in security workflows. You can pull these from Docker Hub or Quay.io.

    Docker Security

    • ellerbrock/alpine-bench-security: Runs docker-bench-security to check for best practices in Docker deployments.

    Scanner

    • frapsoft/nmap: Portscanner.
    • frapsoft/scanssh: Fast SSH server and open proxy scanner.

    Sniffer

    • frapsoft/tcpdump: Command-line packet analyzer.
    • frapsoft/arpon: ARP handler inspection.

    WiFi

    • frapsoft/aircrack-ng: WiFi network security collection.

    Intrusion Detection

    • frapsoft/snort: Network Intrusion Detection & Prevention System.

    Web

    • frapsoft/slowhttptest: Application Layer DoS attack simulator.
    • frapsoft/nikto: Web Server Scanner.

    SSL

    • frapsoft/certbot: CertBot (Let's Encrypt client).
    • frapsoft/openssl: SSL/TLS toolkit.

    Stresstesting

    • frapsoft/stress: Stress testing utility.

    Minimal Base Images

    • frapsoft/alpine-unpriv: Alpine Linux with an unprivileged user.
    • frapsoft/debian-unpriv: Debian Linux with an unprivileged user.