4383/director repository overview

⁠director

Security footprint scanner torified and dockerized.

Make anonymized security footprint inside docker container.

Security scanner run under the tor network inside a standalone docker container.

Results in your shell output.

⁠Credits

Author: Hervé Beraud (4383)⁠

⁠Description

director is a tiny footprint tools for web based security rules.

No pentest tools installation needed on your host, it's run totaly in standalone mode.

All pentest tools network connections has torified by using tor and polipo.

⁠Dependencies

• Docker⁠

⁠Usage

⁠Via the docker hub

docker pull 4383/director:latest
docker run -e "TARGET=http://<your-target>" 4383/director:latest

⁠Via the standalone method

git clone https://github.com/4383/director
cd director
docker build -t director .
docker run -e "TARGET=<your-domaine-target>" director

⁠Parameters

Use the -e option for define environment variables to pass to director.

Use the bash syntax for setting an environment variable.

⁠The TARGET parameter

The target to scan.

Just set this with a valid domain name⁠ like www.google.com⁠

Syntax example : -e "TARGET=www.google.com"

⁠The DIRBPROTO parameter

The HTTP protocole to use with dird.

By default is set with http:// but you can set this with https://

Syntax example : -e "DIRBPROTO=https://"

⁠Included tools

⁠Dirb⁠

A content web scanner. We use a fork of the official dirb project hosted on github⁠ for simply docker container deployment.