大宝剑了解一下

About

大宝剑-信息收集和资产梳理工具(红队、蓝队、企业组织架构、子域名、Web资产梳理、Web指纹识别、ICON_Hash资产匹配)

我个人认为这也是一款优秀的溯源工具,绝对是在能让你在客户现场加餐的优秀工具

Install

容器自动 pull 最新版,除非有大变更

docker run -it --name dbj -p 5000:5000 xrsec/dbj:latest

InI

admin / admin
http://localhost:5000/admin/
https://github.com/wgpsec/DBJ

查看具体输出信息

docker logs dbj
#watch docker logs dbj

Debug

image-20210607123729438

穷人家的孩子总喜欢瞎折腾

image-20210607123658761

贫穷限制了我的想象力,但是无法限制我的行动力

image-20210607123845624

Docker

dbj.sh

#!/bin/sh
clear
echo "\n\033[1;34m __ __ ____ \033[0m"
echo "\033[1;32m \ \/ / | _ \ ___ ___ ___ \033[0m"
echo "\033[1;36m \ / | |_) | / __| / _ \ / __| \033[0m"
echo "\033[1;31m / \ | _ < \__ \ | __/ | (__ \033[0m"
echo "\033[1;35m /_/\_\ |_| \_\ |___/ \___| \___| \n\033[0m"

echo "\033[1;32m[help] \033[0m"
echo "\033[1;36mhttps://github.com/wgpsec/DBJ \n\033[0m"
echo "\033[1;36mUpdate DBJ \033[0m"
/usr/bin/git -C /DBJ/ pull
echo "\033[1;36mUpdate DBJ-PY \033[0m"
pip3 install -r /DBJ/requirements.txt -i https://mirrors.aliyun.com/pypi/simple/
echo "\033[1;36mStart DBJ \033[0m"
sh -c "/DBJ/start.sh"

Dockerfile

FROM ubuntu:18.04
LABEL Auther="xrsec"
LABEL Mail="troy@zygd.site"
LABEL Github="https://github.com/wgpsec/DBJ"

ADD . /

RUN sed -i s@/archive.ubuntu.com/@/mirrors.aliyun.com/@g /etc/apt/sources.list
RUN apt-get update \
&& apt-get -o Acquire::BrokenProxy="true" -o Acquire::http::No-Cache="true" -o Acquire::http::Pipeline-Depth="0" -y install python3 python3-pip mongodb redis-server git \
&& git clone https://github.com/wgpsec/DBJ.git /DBJ \
&& pip3 install -r /DBJ/requirements.txt -i https://mirrors.aliyun.com/pypi/simple/ \
&& chmod 777 /DBJ/start.sh \
&& chmod 777 /dbj.sh

WORKDIR /DBJ/
ENV LC_ALL=de_DE.utf-8
ENV LANG=de_DE.utf-8
EXPOSE 5000
CMD /dbj.sh

穷人家的孩子表示想要一个小小的关注可以嘛