Skip to main content

Create a Docker Container in the Host network

 

#Start a new container - which has the same ip as Host Container
docker run -it --network host kalilinux/kali-rolling

#Start a container 
docker start Container_ID

#Attach a container 
docker attach Container_ID
ctrl+p & ctrl+q to detach from a container without killing it 

#Start a container in Detached mode
docker run -d --network host kalilinux/kali-rolling

#Start a container in bridge network 
#Default is bridge network
docker run -dit --name test kalilinux/kali-rolling /bin/bash

Bridge network = new Docker network - separate network
Host = Docker Host network 

#Create a bridge network
docker network create --driver=bridge my_bridge_network --subnet=10.10.10.0/24 --gateway=10.10.10.1

#Run the container in Bridge network 
docker run -it --name my_container --network my_bridge_network --ip 10.10.10.2 ubuntu:latest
Moving Docker Container to a Different Host 

#list the containers and copy the id
docker container ls 

#stop the container
docker stop <Container_ID_or_name>

#Create a new image 
docker commit <container_ID> <new_name:tag>

#save the image to a tar file to export
docker save -o <container_backup.tar> <Image_name>

#Push the container to a new Host
scp <container_backup.tar> root@10.10.10.10:/home/backup/

#Login to the new host and load the container, might take some time based on the container size
docker load -i <container_backup.tar>

#List the images, confirm your new docker container here 
docker images

#Create/run the container 
docker create --name kali container_backup
docker container container_id start
or
#create and start the container docker run -it --name kali --hostname kali <Image_id> #Setup auto restart docker update --restart unless-stopped kali #Verify restart status docker inspect -f '{{.HostConfig.RestartPolicy.Name}}' kali #make sure docker starts on boot sudo systemctl enable docker
Basic Docker Commands

#list containers
sudo docker ps 

#Get a shell 
docker exec -it <container_name_or_id> /bin/bash



Comments

Popular posts from this blog

POC Links for CVE's

  Serach for a CVE here first - Trickest/cve Apache CVE-2024-38475 - CVE-2024-38475 #version less than 2.4.51 CVE-2021-44790 - h ttps://www.exploit-db.com/exploits/51193 #Apache HTTP Server 2.4.50 CVE-2021-42013 - https://www.exploit-db.com/exploits/50406 use https://github.com/mrmtwoj/apache-vulnerability-testing for below CVE's CVE-2024-38472: Apache HTTP Server on Windows UNC SSRF CVE-2024-39573: mod_rewrite proxy handler substitution CVE-2024-38477: Crash resulting in Denial of Service in mod_proxy CVE-2024-38476: Exploitable backend application output causing internal redirects CVE-2024-38475: mod_rewrite weakness with filesystem path matching CVE-2024-38474: Weakness with encoded question marks in backreferences CVE-2024-38473: mod_proxy proxy encoding problem CVE-2023-38709: HTTP response splitting EXIM #suppodily should work for versions below Exim 4.96.1 - is not accurate CVE-2023-42115 - https://github.com/AdaHop-Cyber-Security/Pocy/tree/main

SQL DB & SQL Injection Pentest Cheat Sheet

1) MSSQL Injection Cheat Sheet | pentestmonkey 2) xp_cmdshell | Red Team tales 3) PentesterMonkey SQL Injection Cheatsheet Use dbeaver for GUI Access 4) SQL Injection Explanation | Graceful Security Common Ports Microsoft SQL: 1433/TCP (default listener) 1434/UDP (browser service) 4022/TCP (service broker) 5022/TCP (AlwaysOn High Availability default) 135/TCP (Transaction SQL Debugger) 2383/TCP (Analysis Services) 2382/TCP (SQL Server Browser Service) 500,4500/UDP (IPSec) 137-138/UDP (NetBios / CIFS) 139/TCP (NetBios CIFS) 445/TCP (CIFS) Oracle SQL: 1521/TCP 1630/TCP 3938/HTTP MongoDB : 27017,27018,27019/TCP PostgreSQL: 8432/TCP MySQL: 3306/TCP SQL DB Enum with nmap: nmap -p 1433 —script ms-sql-info —script-args mssql.instance-port=1433 IP_ADDRESS nmap -Pn -n -sS —script=ms-sql-xp-cmdshell.nse IP_ADDRESS -p1433 —script-args mssql.username=sa,mssql.password=password,ms-sql-xp-cmdshell.cmd="net user bhanu bhanu123 /add" nmap -Pn -n -sS —script=ms-sql-xp-cmds...

Cloud Pentest Cheatsheet - Azure

Azure Cloud offers a comprehensive ecosystem of tools and services. Among its core components are: Azure Active Directory (AAD) Azure Resource Manager (ARM) Office 365 (O365) Initial Access Try to get a user credential via OSINT/Social engineering or try to comprise a web application hosted on Azure VM. Enumerate the roles attached to the VM and try to escalate your privileges.   Entra ID Directory Role Entra ID directory roles are predefined roles that grant permissions to perform specific tasks within an Azure AD tenant. These roles are essential for managing administrative tasks in Entra ID. Types of Roles: Built-in Directory Roles Global Administrator Application Administrator User Administrator Custom Directory Roles Accessing APIs in Azure Entra ID - Access via Microsoft Graph API Endpoint {HTTP method} https://graph.microsoft.com/{version}/{resource}?{query-parameters} Azure Resource Manager API Endpoint (ARM-specific) {HTTP method} https://management.azure...