Files
docker_file_analysis/Dockerfile

117 lines
3.4 KiB
Docker
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
FROM kalilinux/kali-rolling
LABEL maintainer="tabledevil"
USER root
ARG DEBIAN_FRONTEND=noninteractive
ENV TZ=Europe/Berlin
RUN apt-get update && apt-get install -y git && rm -rf /var/lib/apt/lists/*
RUN apt-get update && apt-get install -y \
autoconf \
busybox \
catdoc \
docx2txt \
exiftool \
git \
imagemagick \
libboost-python-dev \
libboost-thread-dev \
libjpeg-dev \
libreoffice \
libssl-dev \
libtool \
mc \
mpack \
npm \
osslsigncode \
p7zip-full \
pdftk \
pev \
pkg-config \
pipx \
python3 \
python3-lxml \
python3-pip \
ruby \
unrtf \
unzip \
wget \
; \
rm -rf /var/lib/apt/lists/*
# Configure PIP´y
ENV PYTHONDONTWRITEBYTECODE=1
ADD pip.conf /etc/pip.conf
# OLETOOLS & DIDIERSTEVENS
RUN git clone https://github.com/DidierStevens/DidierStevensSuite /opt/didierstevenssuite
RUN chmod +x /opt/didierstevenssuite/*py
RUN python3 -m pip install --break-system-packages --upgrade pip ; true
RUN python3 -m pip install --break-system-packages psutil oletools ; true
# PDF
RUN gem install origami
RUN sed -i '/PDF/s/"none"/"read|write"/' /etc/ImageMagick-6/policy.xml
ENV PATH="${PATH}:/opt/didierstevenssuite/:/opt/pypy2.7-v7.3.5-linux64/bin"
ADD files/README /opt/README
ADD files/command_help /opt/command_help
RUN echo 'cat /opt/README' >> /etc/bash.bashrc
### VIPERMONKEY
## install pypy
RUN wget -O- https://downloads.python.org/pypy/pypy2.7-v7.3.5-linux64.tar.bz2 | tar -C /opt/ -xvj
RUN ln -s $(which pypy) /usr/local/bin/python
## install and upgrade pip
RUN pypy -m ensurepip
RUN pypy -m pip install -U pip
#RUN pypy -m pip install -U peepdf
#RUN pypy -m pip install -U https://github.com/decalage2/ViperMonkey/archive/master.zip
#RUN ln -s /opt/pypy2.7-v7.3.5-linux64/site-packages/vipermonkey/vmonkey.py /usr/local/bin/vmonkey
#RUN chmod +x /usr/local/bin/vmonkey
RUN wget -O- https://github.com/mandiant/capa/releases/download/v7.4.0/capa-v7.4.0-linux.zip | busybox unzip -d /usr/bin -
RUN chmod +x /usr/bin/capa
### JS Sandbox
RUN npm install box-js --global --production
### Update flask
RUN pip uninstall -y --break-system-packages flask-restx && pip install --break-system-packages flask-restx
### LATER TODO
#RUN git clone https://github.com/buffer/pyv8.git ; cd pyv8 ; python setup.py build && python setup.py install && cd .. && rm -rf pyv8
#RUN git clone https://github.com/buffer/libemu.git ; cd libemu ; autoreconf -v -i && ./configure --prefix=/opt/libemu && make install && cd .. && rm -rf libemu2
### Create User
RUN groupadd -g 1000 -r user && \
useradd -u 1000 -r -g user -d /home/user -s /sbin/nologin -c "Nonroot User" user && \
mkdir /home/user && \
cp /root/.bashrc /home/user/ && \
chown -R user:user /home/user
### Create nonroot
RUN groupadd -g 1001 -r nonroot && \
useradd -u 1001 -r -g nonroot -d /home/nonroot -s /sbin/nologin -c "Nonroot User" nonroot && \
mkdir /home/nonroot && \
cp /root/.bashrc /home/nonroot/ && \
chown -R nonroot:nonroot /home/nonroot
### Set UP Environment
USER nonroot
ENV LANG de_DE.UTF-8
ENV PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/didierstevenssuite/:/opt/pypy2.7-v7.3.5-linux64/bin:/home/nonroot/.local/bin
WORKDIR /data
### Install unfurl & dependencies
RUN pipx install --include-deps dfir-unfurl
RUN pipx inject dfir-unfurl requests six maclookup
### Install visidata
RUN pipx install --include-deps visidata
### Install oletools
RUN pipx install --include-deps oletools
CMD /bin/bash