MSFBrowser

I have been following Jerry Gamblin’s (Twitter: @jgamblin) excellent work on dockerizing hacking tools, and decided to try my first project, I wanted to give a shot at dockerizing the infamous Metasploit Framework.

Please be aware that I am very inexperienced with Docker, therefore you may find many different errors or inconsistencies.

The first one is that I basically had to build the container interactively in order to be able to install the Metasploit Framework from Github. I really tried to do it via dockerfile but was not able to, maybe you can give it a try and share yours with me (Twitter: @enocarlos)!

You can pull the Docker image from here. I know the container can use some cleaning because it is huge (1.8Gb.).

The container includes:

Ubuntu 14.04, Metasploit, OpenBox and NoVNC.

To get it started run:

docker run -d -t -i -p 6080:6080 carloss7/msf_browser

And then direct your browser to:

http://ip:6080

Once it loads you’ll get a black screen in your browser, just right-click on it and then choose Terminal emulator:

1st

You should get a Terminal:

2nd

And this is where you can see the other details that I was not able to correct, from there cd /opt/metasploit-framework, then source /usr/local/rvm/scripts/rvm, and then type the so-desired command: msfconsole:

3rd

And there you go:

4th

Here is what’s included in the dockerfile:

FROM msf_browser:latest

ENV DEBIAN_FRONTEND noninteractive

RUN apt-get update -y && \
apt-get install -y \
net-tools \
openbox \
git \
x11vnc \
xvfb \
wget \
python \
python-numpy \
unzip \
geany \
iceweasel menu && \

cd /root && git clone https://github.com/kanaka/noVNC.git && \
cd noVNC/utils && git clone https://github.com/kanaka/websockify websockify && \
cd /root

RUN cd /opt/metasploit-framework
RUN bash -c 'source /usr/local/rvm/scripts/rvm'

ADD startup.sh /startup.sh

RUN chmod 0755 /startup.sh && \
apt-get autoremove && \
rm -rf /var/lib/apt/lists/*

CMD /startup.sh
Advertisements