├── AWVS12 ├── Dockerfile └── README.md ├── LICENSE ├── Nessus ├── Dockerfile └── README.md └── README.md /AWVS12/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM ubuntu:18.04 2 | ENV DEBIAN_FRONTEND noninteractive 3 | 4 | USER root 5 | WORKDIR /data 6 | COPY ./acunetix_trial.sh . 7 | RUN sed -i "s@http://.*archive.ubuntu.com@http://mirrors.aliyun.com@g" /etc/apt/sources.list \ 8 | && sed -i "s@http://.*security.ubuntu.com@http://mirrors.aliyun.com@g" /etc/apt/sources.list \ 9 | && apt-get update \ 10 | && apt-get install -y sudo apt-utils net-tools systemd \ 11 | && apt-get install -y libxdamage1 libgtk-3-0 libasound2 libnss3 libxss1 libx11-xcb1 \ 12 | && chmod u+x acunetix_trial.sh 13 | #自行修改邮箱、密码 14 | RUN sh -c '/bin/echo -e "\nyes\nubuntu\nadmin@test.com\nAa123456\nAa123456\n"| ./acunetix_trial.sh' \ 15 | && chmod u+x /home/acunetix/.acunetix_trial/start.sh 16 | 17 | #wvs版本发生变化的话,请修改下方的版本号。版本号在 acunetix_trail.sh 中有 18 | WORKDIR /home/acunetix/.acunetix_trial/v_190515149/scanner 19 | COPY patch_awvs . 20 | RUN chmod u+x patch_awvs 21 | 22 | USER acunetix 23 | CMD /home/acunetix/.acunetix_trial/start.sh 24 | -------------------------------------------------------------------------------- /AWVS12/README.md: -------------------------------------------------------------------------------- 1 | # AWVS 2 | 3 | ## 简述 4 | 5 | 1. 因为破解版有些问题,有时候一个星期后虽然仍然显示永久激活,但实际上并不可用,二次激活会出现奇怪的问题…… 6 | 2. 其它人发的 docker 不是很透明,担心不可控,还是自己写一个吧又不难…… 7 | 3. 破解版做一下隔离会比较好 8 | 9 | 因此萌发了用 docker 做扫描器的想法。 10 | 11 | ## 使用 12 | 13 | 1. 使用的 AWVS 安装包从 下载 14 | 2. 将破解补丁 `patch_awvs` 和安装包 `acunetix_trail.sh` 放在该目录下。安装包可以直接从官网下载,而破解补丁用的是广为流传的、52破解上的破解补丁,如有担心可以更换为自己信任的补丁 15 | 3. 运行 Dockerfile 16 | 4. 成功运行后需要手动进入容器进行激活,不过也很简便啦 17 | 5. 用户名密码:admin@test.com/Aa123456,可在 Dockerfile 自行修改 18 | 19 | ```bash 20 | #build image 21 | docker build -t test/wvs . 22 | 23 | #按需修改 24 | docker run -m 2048M -d -p 13443:13443 --name wvs test/wvs 25 | 26 | #进入容器 patch 27 | docker exec -it -u root wvs /bin/bash 28 | #运行 29 | > ./patch_awvs 30 | ``` 31 | 32 | ## 已知缺陷 33 | 34 | 1. 数据库没法做持久化,不知道是我的姿势有误还是什么问题…… 35 | > 解决方法:使用漏洞管控平台对接,如 [SeMF](https://gitee.com/gy071089/SecurityManageFramwork) 啥的 36 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2019 n3ver 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /Nessus/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM ubuntu:18.04 2 | MAINTAINER TEST 3 | 4 | USER root 5 | #VOLUME ["/opt/nessus"] 6 | 7 | #按版本号自行修改 8 | COPY all-2.0.tar.gz /root/ 9 | COPY Nessus-8.2.3-debian6_amd64.deb /root/ 10 | COPY nessus.zip /root/ 11 | 12 | WORKDIR /root 13 | RUN apt-get update -y && apt-get install -y unzip && unzip nessus.zip \ 14 | && dpkg -i Nessus-8.2.3-debian6_amd64.deb \ 15 | && cp ./conf/nessus-fetch.db /opt/nessus/etc/nessus \ 16 | && cp -frap ./nessus/* /opt/nessus/var/nessus \ 17 | && /opt/nessus/sbin/nessuscli update all-2.0.tar.gz 18 | 19 | EXPOSE 8834 20 | CMD /opt/nessus/sbin/nessus-service 21 | -------------------------------------------------------------------------------- /Nessus/README.md: -------------------------------------------------------------------------------- 1 | # Nessus 2 | 3 | ## 使用 4 | 5 | 1. 将安装包`Nessus-8.2.3-debian6_amd64.deb`、插件包`all-2.0.tar.gz`、破解补丁`nessus.zip`都放到该目录下 6 | 1. 建立image 7 | 2. 运行容器,等待插件安装完成即可 8 | 9 | ```bash 10 | docker build -t test/nessus . 11 | #视情况决定是否使用Volume 12 | docker run -d -m 2048M -v NESSUS_VOL:/opt/nessus -v /usr/share/zoneinfo:/usr/share/zoneinfo:ro -p 8834:8834 --name nessus test/nessus 13 | ``` 14 | 15 | 4. 修改密码,默认用户名为 Nessus 16 | 17 | ```bash 18 | docker exec -it nessus /bin/bash 19 | /opt/nessus/sbin/nessuscli chpasswd Nessus 20 | ``` 21 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # SecDevices_docker 2 | 3 | 自行编写的工作中使用到的安全设备Dockerfile 4 | 5 | ## 网盘 6 | 7 | 链接: https://pan.baidu.com/s/1KT1vzGvZLSZcCxVLr5ZHXg 提取码: 6iak 8 | --------------------------------------------------------------------------------