zcomv2/cw-kali-red repository overview

🛡️ cw-kali-red — Kali Linux Red Team Container

cw-kali-red is a Docker container based on Kali Linux Rolling, designed as a full-featured Red Team / offensive pentesting environment, primarily focused on WordPress security, web applications, and network auditing — for authorized and controlled environments only.

It provides a CLI-only (headless) setup, ideal for servers, labs, CTFs, and remote pentesting workflows.

📦 Image zcomv2/cw-kali-red:0.1

Base image: kalilinux/kali-rolling

Size: 2 GB+

Architecture: amd64

Interface: CLI / Headless

✨ Key Features 🔍 Reconnaissance & Enumeration

nmap

whatweb

dnsutils

inetutils-ping

iproute2

🌐 Web & WordPress Pentesting

wpscan

nikto

gobuster

dirb

ffuf

wfuzz

sqlmap

🔐 Credential Attacks

hydra

medusa

john + john-data

hashcat + hashcat-utils

crunch

🔒 SSL / TLS / MITM

sslscan

testssl.sh

mitmproxy

sslsplit

openssl

tshark

📚 Included Wordlists

rockyou.txt (uncompressed)

seclists

wordlists

🧠 Frameworks & Utilities

metasploit-framework

python3, pip

git, curl, wget

nano, vim, tmux, zsh

jq, netcat-traditional

👤 Users User Password Notes root toor Default user kali kali Non-privileged user

Docker starts as root by default.

🚀 Quick Start ▶️ Run (recommended) docker run -it --rm
--name cw-kali-red
--network host
--cap-add=NET_ADMIN
--cap-add=NET_RAW
-v /opt/cw-kali-red/reports:/data/reports
-v /opt/cw-kali-red/loot:/data/loot
zcomv2/cw-kali-red:0.1

📌 Persistent mode docker run -it
--name cw-kali-red
--network host
--cap-add=NET_ADMIN
--cap-add=NET_RAW
-v /opt/cw-kali-red/reports:/data/reports
-v /opt/cw-kali-red/loot:/data/loot
zcomv2/cw-kali-red:0.1

Reattach later:

docker start -ai cw-kali-red

📁 Recommended Data Layout

Inside the container:

/data ├── reports/ → reports, logs, scan results ├── loot/ → credentials, hashes, dumps └── wordlists/ → custom wordlists

Volumes allow persistence on the host system.

🔐 Required Capabilities

The container runs with:

--network host → accurate scanning (nmap, hydra, wpscan)

--cap-add=NET_ADMIN → sniffing, MITM

--cap-add=NET_RAW → raw sockets

⚠️ Legal Notice

This container is intended ONLY for:

Authorized security audits

Personal labs

Controlled testing environments

CTFs and training

The author is not responsible for misuse or illegal activities.

🧪 Typical Use Cases

Vulnerable WordPress labs

Web application pentesting

Red Team training

Internal security audits

Cyber ranges & education

🧩 Roadmap

0.2 → Red Team helper scripts

0.3 → docker-compose (WordPress vulnerable + cw-kali-red)

latest → rolling stable release

👨‍💻 Author

ZcomV2 / Korman.eth CyberShellGame · Red Team · Security Labs