Sign inSign up

theinfobots/parrot-security

By theinfobots

•Updated 6 months ago

Parrot OS security lab — CTF, pentesting & research. Metasploit, nuclei, sqlmap, hydra + 50 tools.

Image
Networking
Security
Operating systems
0

869

theinfobots/parrot-security repository overview

⁠parrot-security

Parrot OS cybersecurity lab container — CTF, pentesting & security research.

⚠️ For authorized security testing, CTF competitions, and educational use only. Never use these tools against systems you do not have explicit permission to test.

⁠What's included

⁠Exploitation frameworks
ToolPurpose
metasploit-frameworkMSF — exploitation & post-exploitation
exploitdb / searchsploitOffline copy of Exploit-DB
beef-xssBrowser exploitation framework
setSocial Engineering Toolkit
⁠Network recon
ToolPurpose
nmapPort scanner + service detection
masscanUltra-fast port scanner
rustscanFast pre-scanner feeding into nmap
netdiscoverARP network discovery
arp-scanARP host discovery
tcpdumpPacket capture (CLI)
tsharkPacket analysis (Wireshark CLI)
netcatTCP/UDP Swiss army knife
socatAdvanced relay/proxy tool
proxychainsRoute traffic through proxies
⁠Web exploitation
ToolPurpose
sqlmapAutomatic SQL injection
niktoWeb vulnerability scanner
gobusterDirectory/DNS/vhost brute force
dirbWeb content scanner
wfuzzWeb fuzzer
feroxbusterRecursive web content discovery
whatwebWeb technology fingerprinting
nucleiFast template-based scanner
ffufWeb fuzzer (Go)
⁠Password cracking
ToolPurpose
johnJohn the Ripper — hash cracking
hydraOnline brute force (SSH, FTP, HTTP…)
hashcatGPU/CPU hash cracking
crunchWordlist generator
wordlistsRockyou + other common wordlists
⁠Windows / Active Directory
ToolPurpose
netexecSwiss army knife for AD pentesting (successor to CrackMapExec)
enum4linuxSMB/NetBIOS enumeration
smbclientSMB client
smbmapSMB share enumeration
impacket-scriptsPSExec, secretsdump, GetTGT…
ldap-utilsLDAP queries
⁠OSINT & recon
ToolPurpose
theharvesterEmail, subdomain, IP harvesting
recon-ngOSINT framework
subfinderSubdomain discovery (Go)
dnsxFast DNS resolver (Go)
waybackurlsWayback Machine URL enumeration
gauGet All URLs from various sources
⁠Forensics & reverse engineering
ToolPurpose
binwalkFirmware/binary analysis
foremostFile carving
steghideSteganography
exiftoolMetadata extraction
radare2Reverse engineering framework
volatility3Memory forensics (Python)
⁠Wireless
ToolPurpose
aircrack-ngWi-Fi security auditing
⁠Python security libraries

pwntools · impacket · scapy · shodan · certipy-ad · bloodhound · dnspython · capstone · keystone-engine · ropper · volatility3 · pycryptodome

⁠Go tools

subfinder · httpx · nuclei · dnsx · ffuf · waybackurls · gau · anew · gf

⁠Quick start

# Basic shell
docker run --rm -it \
  -v "$PWD:/workspace" \
  theinfobots/parrot-security:latest

# With network capabilities (tcpdump, tshark, nmap raw)
docker run --rm -it \
  --network host \
  --cap-add NET_ADMIN \
  --cap-add NET_RAW \
  -v "$PWD:/workspace" \
  theinfobots/parrot-security:latest

# Full pentesting mode (ptrace + network)
docker run --rm -it \
  --network host \
  --cap-add NET_ADMIN \
  --cap-add NET_RAW \
  --cap-add SYS_PTRACE \
  --security-opt seccomp=unconfined \
  -v "$PWD:/workspace" \
  theinfobots/parrot-security:latest

⁠Metasploit

# First-time DB setup (optional — MSF works without it)
msfdb init

# Start console
msfconsole

⁠Wordlists

/usr/share/wordlists/rockyou.txt        # ~14M passwords
/usr/share/wordlists/                   # full directory

⁠searchsploit

searchsploit apache 2.4
searchsploit -m 12345          # mirror exploit to current dir
searchsploit --update          # update local exploit-db copy

⁠Common workflows

⁠Port scan → service enum
rustscan -a TARGET -- -A -sV
# or
nmap -sV -sC -p- TARGET
⁠Web directory brute force
feroxbuster -u http://TARGET -w /usr/share/wordlists/rockyou.txt
gobuster dir -u http://TARGET -w /usr/share/dirb/wordlists/common.txt
⁠Subdomain enumeration
subfinder -d example.com | dnsx
⁠Hash cracking
john --wordlist=/usr/share/wordlists/rockyou.txt hash.txt
hashcat -m 0 hash.txt /usr/share/wordlists/rockyou.txt

⁠Security notes

  • Do not run with --privileged.
  • --network host + NET_RAW/NET_ADMIN gives significant network access.
  • hashcat GPU acceleration requires --gpus all and NVIDIA/AMD drivers on the host.
  • aircrack-ng requires a wireless adapter passed through to the container.

⁠Tags

TagDescription
latestParrot Security with full tool suite

Built and maintained by theinfobots⁠.

Tag summary

Content type

Image

Digest

sha256:f2fd8de3a…

Size

4.9 GB

Last updated

6 months ago

docker pull theinfobots/parrot-security