commitkey/metasploit repository overview

⁠How to use this image?

⁠Using Metasploit

First, you must create a folder named metasploit_data to use it to store metasploit data, then you can create a new container with this command.

docker run -it --rm --name metasploit --net host -v $(pwd)/metasploit_data:/home/msf commitkey/metasploit bash

To use Metasploit the first thing you must do is to setup the database.

msfdb init

After this you can start Metasploit.

msfconsole

The image have two users: msf and root, you can use sudo su to change to root user or use sudo to execute commands as root.

There are a few tools installed like Tor, Proxychains, Apache 2, PHP, Iptraf, tcpdump, fping, lftp, git, restic, nmap, Python 3, Impacket, ...

⁠Using Tor service

You can use Tor for anonymity.

sudo service tor start

And test it using curl:

curl -s https://api.ipify.org⁠ --socks5 localhost:9050

⁠Using Proxychains

sudo proxychains bash

⁠Iptraf

Or you can execute a new terminal and use iptraf to see trafic

docker exec -it metasploit bash

sudo iptraf

⁠Apache 2 and PHP

Another way to use this image is using Apache2 to serve php content. To do so, you must use this command to create the container and run it in the background. You can create a folder named metasploit_www to save php web content into.

docker run -d -it -p 8080:80 -p 8443:443 --name metasploit -v $(pwd)/metasploit_data:/home/msf -v $(pwd)/metasploit_www:/var/www/html commitkey/metasploit

To test it you can use you favorite browser to browse http://localhost:8080⁠ or https://localhost:8443⁠.