Portable Docker workstation for bug bounty, pentest, recon and security testing.
978
Leviathan is a portable offensive security workstation that lives inside a single Docker container. Built on Kali Linux rolling, it ships 50+ hand-picked tools, a fully-configured ZSH environment with Dracula/Powerlevel10k, and persistent wordlists — assembled once and ready for bug bounty, pentesting, and red team operations from day one.
Forget spending hours installing conflicting packages, chasing missing dependencies, or rebuilding your environment every time you move machines. Leviathan gives you one image that builds once and runs anywhere, isolated from your host.
Build once. Hunt anywhere. Stay isolated. Stay reproducible. Stay sharp — legally.
Leviathan was designed to simplify the creation of a professional offensive security lab using Docker.
Instead of manually installing dozens of tools on your host system, Leviathan organizes the most useful security tools into a clean containerized environment.
It is ideal for:
Leviathan groups tools by offensive security workflow:
| Category | Purpose | Example Tools |
|---|---|---|
| Recon | Asset discovery, enumeration and scanning | subfinder, nmap, nuclei, naabu |
| Web | Web application testing | sqlmap, ffuf, nikto, XSStrike, gobuster |
| Exploit | Exploitation and post-exploitation support | metasploit, searchsploit, pwncat |
| Network | Network analysis and internal testing | nmap, masscan, Responder, CrackMapExec |
| Passwords | Password attacks and hash cracking | hashcat, john, hydra |
| Cloud | Cloud security auditing | awscli, prowler, cloudmapper, s3scanner |
Pull the image from Docker Hub:
docker pull l1m4/leviathan:latest
Run the image as a container:
docker run -it l1m4/leviathan:latest
Start Leviathan with network permissions:
docker run -it \
--name leviathan \
--cap-add=NET_ADMIN \
--cap-add=NET_RAW \
--security-opt seccomp=unconfined \
l1m4/leviathan:latest
Update System Packages
sudo apt update # Update package lists
sudo apt upgrade -y # Upgrade installed packages
Stop and Remove Container
docker stop leviathan # Stop the Leviathan container
docker rm leviathan # Remove the Leviathan container
Start Existing Container
docker start leviathan # Start the Leviathan container
docker exec -it leviathan bash # Open Bash inside the container
Content type
Image
Digest
sha256:416a7b477…
Size
3 GB
Last updated
4 months ago
docker pull l1m4/leviathan