rosehgal/dockerent

The only open-source tool to analyze vulnerabilities and configuration issues with running docker container(s) and docker networks.

dockerent's Issues

Support for file output plugin.

Dump the json report to file.

Enumererate running docker system Info.

Userinfo plugin dont show errors if there are any.

Docker cmd_history scanner plugin

Docker network scanner.

Scan the docker network for open ports and vulnerable services.

Add a LICENSE, so you can trully call it "open-source"

This project doesn't have a LICENSE, so you can't call it "open-source" if you don't provide an accepted OSI license.

How to fix it? simply add a LICENSE.

https://opensource.org/licenses

Docker scanner plugins to scan for plaintext passwords in common files.

Add report download option.

DockerENT version comes twice

Describe the bug
DockerENT --version displays twice.

To Reproduce
DockerENT --version

Expected behavior
This should only come once.

Enumererate running docker cron-jobs Info.

Add python linter

Enumererate running docker file-system Info.

Remove HTML code from the html.py file

If possible put it in template and use templating engines that can generate HTML from template.

Sample scanner plugin consistent with other plugins output.

CLI application gets hang.

Webapp is listening on all intefaces

Describe the bug
The webapp of DockerENT listens on all network interfaces.

To Reproduce
Steps to reproduce the behavior:

1. Run python -m DockerENT
2. Observe web app is listening on all interfaces

Expected behavior
Should only listen on localhost. If on all IP's then should be behind some authentication.

Can't build DockerENT on Debian Buster

Describe the bug
When building DockerENT, make venv fails, complaining about missing arrow stuff. However, I have installed python3-arrow from Debian repository already. I have not managed to find other packages that would help (other than maybe installing apache-arrow from unofficial sources (which I rather not do since I am doing this on an actual server where I don't want to install too much stuff I don't use.

To Reproduce
Following the readme, git cloning and make venv

Expected behavior
I would have expect the building of venv.

Screenshots
-- Searching for Python libs in /home/klaus/containers/DockerENT/venv/lib64;/home/klaus/containers/DockerENT/venv/lib;/usr/lib/python3.7/config-3.7m-x86_64-linux-gnu
-- Looking for python3.7m
-- Found Python lib /usr/lib/python3.7/config-3.7m-x86_64-linux-gnu/libpython3.7m.so
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29")
-- Could NOT find Arrow (missing: Arrow_DIR)
-- Checking for module 'arrow'
-- No package 'arrow' found
CMake Error at /usr/share/cmake-3.13/Modules/FindPackageHandleStandardArgs.cmake:137 (message):
Could NOT find Arrow (missing: ARROW_INCLUDE_DIR ARROW_LIB_DIR
ARROW_FULL_SO_VERSION ARROW_SO_VERSION)
Call Stack (most recent call first):
/usr/share/cmake-3.13/Modules/FindPackageHandleStandardArgs.cmake:378 (_FPHSA_FAILURE_MESSAGE)
cmake_modules/FindArrow.cmake:419 (find_package_handle_standard_args)
cmake_modules/FindArrowPython.cmake:46 (find_package)
CMakeLists.txt:214 (find_package)

Desktop (please complete the following information):
Debian Buster

Smartphone (please complete the following information):
N/A

Additional context
I would honestly prefer to pull an image off dockerhub instead. This is way too complicated for me.

Thanks!

`DockerENT -w` doesnot works with pip install setup

Describe the bug

➜  ~ DockerENT -w
2020-09-05 12:46:44 INFO     2020-09-05 12:46:44 [68372] [MainProcess] [MainThread] INFO DockerENT.__main__:125 - Starting web application ...                                         __main__.py:125
Usage: streamlit run [OPTIONS] TARGET [ARGS]...

Error: Invalid value: File does not exist: web_app.py
Traceback (most recent call last):
  File "/usr/local/bin/DockerENT", line 5, in <module>
    from DockerENT.__main__ import start
  File "/usr/local/lib/python3.7/site-packages/DockerENT/__main__.py", line 143, in <module>
    start()
  File "/usr/local/lib/python3.7/site-packages/DockerENT/__main__.py", line 131, in start
    _log.info(web_process.stdout.read())
AttributeError: 'NoneType' object has no attribute 'read'

To Reproduce

pip install DockerENT

DockerENT -w

Web Interface Error

Describe the bug
When I try to run from the web interface it says 'NoneType' object is not subscriptable.

To Reproduce
Steps to reproduce the behavior:

1. Access the Web interface
2. Select all Containers, All Networks and All Tests
3. See error

Expected behavior
Tests to run I guess and some sort of feedback provided

Screenshots

Desktop (please complete the following information):

• OS: Ubuntu Server 20.04
• Browser: Brave and Firefox

Make Pylama happy with all clean checks.

Connect to Docker server via API

Currently the docker server is considered to be from local host. But this is not always the case, the docker server may be remote.

Enumererate running docker network Info.

Support for pluggable output plugins

Support for HTML output plugin.

A graph based visualization for scanned dockers.

Enumererate running docker user Info.

Audit not working with CLI.