artis3n/kali-artis3n

A kalilinux/kali-rolling container with extra juice.

artis3n/kali

A kalilinux/kali-rolling container with extra juice.

The kalilinux/kali-rolling container comes with no pre-installed services. It is meant to be lightweight and clocks in around 118 MB. You must configure every service and tool you need from that base image.

This container, uncompressed, is around 4.7 GB (or 2.4 GB without wordlists). It installs and pre-configures a number of frequently uses Kali tools. It is meant to allow you to quickly get up and running with a Kali environment on an ephemeral host. Don't spend time configuring and tweaking - pull, run, execute, pwn.

Wordlists

A premium is placed on keeping this image as small as is reasonable given its intended purpose. For example, searchploit is installed in this image but exploitdb-papers is not installed because this increases the image size by 6GB.

Seclists and Rockyou are pre-installed by default in the latest and semver tags, e.g. 1, 1.2, 1.2.0. This increases the image size by 1.5 GB. Therefore, if you do not need wordlists, you can use the <tagname>-no-wordlists tag. For example:

docker pull artis3n/kali:latest-no-wordlists

Currently, only latest is built without wordlists, as latest-no-wordlists. The semver tags (e.g. 1, 1.2, 1.2.0) are built with wordlists.

Image efficiency (Dive)

Efficiency of the build image is checked with dive:

Image condition	Image Size
With wordlists
Without wordlists

Last checked: 2022-02-18

The container is not meant for a persistent attacker environment. The intention is for a quick environment to run attacks and document the results outside of the container. The container does not expect a mounted volume for persistent storage - although, like any container, storage inside the container will remain until you docker rm and you may set up volumes as you prefer.

Usage

Download the image:

• Docker Hub
• GitHub Container Registry

docker pull artis3n/kali:latest
docker pull artis3n/kali:latest-no-wordlists
# or
docker pull ghcr.io/artis3n/kali:latest
docker pull ghcr.io/artis3n/kali:latest-no-wordlists

Run the container:

docker run --name kali -it --rm artis3n/kali:latest
# Or detach the container and run commands through it
docker run --name kali -id artis3n/kali:latest
docker exec -t kali nmap -p- 127.0.0.1

Suggested: Alias a command to the container, run commands through the container from your terminal with ease:

alias kali="docker exec -it kali"
kali sqlmap -u ...

Get a terminal if you backgrounded the container:

docker exec -it kali /bin/bash

Stop the backgrounded container, turn it back on whenever you need to run a command:

docker stop kali
docker start kali

Kill the backgrounded container:

docker stop kali && docker rm kali

Contributions

Missing a tool you would like pre-configured? File a ticket and I will add it. A pull request is also welcome.

For any new tools, you must add validation tests to .github/workflows/ci.yml. Use the existing tests as a baseline. These tests ensure the tools are installed and pre-configured correctly.

Recognition

Thanks Anit Gandhi for help optimizing the Dockerfile and build images.

kali-artis3n's Issues

[BUG] systemd fails to build on GitHub Actions, but not locally

Building this image in the GitHub action workflow fails with the following error:

done.
done.
Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 systemd-timesyncd : Depends: systemd (= 245.5-3) but it is not installable
E: Error, pkgProblemResolver::Resolve generated breaks, this may be caused by held packages.

This seems to come from this line:

    && apt-get install -y --no-install-recommends systemctl \

This is reproducible locally.

With a cached version of kalilinux/kali-rolling:latest, the following is expected:

done.
done.
Reading package lists...
Building dependency tree...
Reading state information...
The following packages were automatically installed and are no longer required:
  dmsetup libapparmor1 libargon2-1 libcryptsetup12 libdevmapper1.02.1
  libip4tc2 libjson-c4 libkmod2
Use 'apt autoremove' to remove them.
Suggested packages:
  tini | dumb-init
The following packages will be REMOVED:
  systemd systemd-timesyncd
The following NEW packages will be installed:
  systemctl
0 upgraded, 1 newly installed, 2 to remove and 38 not upgraded.
Need to get 78.8 kB of archives.

Will wait a while and see if this is fixed upstream. If not will investigate further.

[FEAT] Use Goss for container validation testing

Instead of individual docker run which <executable> commands to check whether things exist in the container, use goss.

Move to GitHub Container Registry

And use Docker's build-push action.

Add rustscan

https://github.com/RustScan/RustScan