rapid7/appspider-local-oobsite repository overview

⁠AppSpider Out of Band Website

The image contains a website providing remote JavaScript code for out of band inclusion checks. The purpose of this site is to work in conjuction with the Rapid7 Web App ScanEngine in an offline environnment where the publicly accessable site is not reachable.

⁠Getting Started

⁠Prerequisites

In order to run this container you'll need Docker installed.

• Windows⁠
• OS X⁠
• Linux⁠

⁠How to use this image

⁠Running locally along side a local engine

$ docker run --name some-oobsite-name -d -p 8080:8080 rapid7/appspider-localoobsite:latest

By default the container expects to be exposed on port 8080 while internally it's hosted on 80.

⁠Exposing external port

$ docker run --name some-oobsite-name -p 9080:8080 -e OOBSITE:PUBLIC_ADDRESS=https://localhost:9080 -d rapid7/appspider-localoobsite:latest

When changing the port OOBSITE:PUBLIC_ADDRESS must also be set so that the links returned in the request can point back to the out of band site. Then you can hit http://localhost:9080 or http://host-ip:9080 in your browser. To expose the container as a server the host machine must allow access to the configured port and OOBSITE:PUBLIC_ADDRESS should be set to either an IP address or domain name that can be recognized by other machines.

⁠HTTPS support

The image does not directly support HTTPs, if HTTPS is required then the recommended approach is to host the site behind a reverse proxy that has HTTPS enabled. If that approach is used then OOBSITE:PUBLIC_ADDRESS should be set to the external address provided by the reverse proxy.

⁠Versioning

The latest release is always tagged as latest. All current versions are 1.0.0.x.

⁠Authors

• Rapid7