# Nightingale | Docker Environment For Pentesting Which Having All The Required Tool For VAPT **URL:** \ **Category:** Tools & Scripts\ **Tags:** programming, hacking\ **Created:** [June 19, 2022, 2:01pm UTC](https://onehack.st/t/nightingale-docker-environment-for-pentesting-which-having-all-the-required-tool-for-vapt/220140 "2022-06-19T14:01:35Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\ **Post date:** [June 19, 2022, 2:01pm UTC](https://onehack.st/t/nightingale-docker-environment-for-pentesting-which-having-all-the-required-tool-for-vapt/220140/1 "2022-06-19T14:01:35Z")
[![Nightingale Logo](https://raw.githubusercontent.com/OWASP/www-project-nightingale/main/assets/images/Nightingale.png)](https://raw.githubusercontent.com/OWASP/www-project-nightingale/main/assets/images/Nightingale.png) [![OWASP Incubator](https://camo.githubusercontent.com/1894b38d03b5fd2a6c84ba95675d64d6972c82597c0fa5982b37a5538c30e919/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f6f776173702d696e63756261746f722d626c75652e737667)](https://www.owasp.org/index.php/Category:OWASP_Project#tab=Project_Inventory) [![](https://camo.githubusercontent.com/a884becb5f9ffbde5531aab1ad72d31215aaa105f9968d17872e503b6a71e6c7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f666f6c6c6f776572732f52414a414e41474f52493f7374796c653d736f6369616c)](https://camo.githubusercontent.com/a884becb5f9ffbde5531aab1ad72d31215aaa105f9968d17872e503b6a71e6c7/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f666f6c6c6f776572732f52414a414e41474f52493f7374796c653d736f6369616c) [![](https://camo.githubusercontent.com/aeb14b94d26789bb5964045a8ef2422d22b046f44ce6023e7787bef84990557b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f52414a414e41474f52493f7374796c653d736f6369616c)](https://camo.githubusercontent.com/aeb14b94d26789bb5964045a8ef2422d22b046f44ce6023e7787bef84990557b/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f73746172732f52414a414e41474f52493f7374796c653d736f6369616c) [![](https://camo.githubusercontent.com/0e3af387a616f3ad192f05e8d05c2df9d4ed8acd49c2f12e5f8e0397732a4ec1/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f2d466f6c6c6f772d626c61636b3f7374796c653d736f6369616c266c6f676f3d4c696e6b6564696e)](https://www.linkedin.com/in/raja-nagori/) [![](https://camo.githubusercontent.com/6a9d676b51f0be3483b633558022d73d92f6727db30740d193703fc9bedd7d64/68747470733a2f2f696d672e736869656c64732e696f2f747769747465722f666f6c6c6f772f52616a614e61676f7269373f7374796c653d736f6369616c266c6162656c3d466f6c6c6f77)](https://twitter.com/RajaNagori7) [![profile count](https://camo.githubusercontent.com/f709e212a39fce81f2e6a798c932b84b76a62ac604155305e40073d8d1fa4453/68747470733a2f2f6b6f6d617265762e636f6d2f67687076632f3f757365726e616d653d7777772d70726f6a6563742d6e69676874696e67616c6526636f6c6f723d626c7565)](https://camo.githubusercontent.com/f709e212a39fce81f2e6a798c932b84b76a62ac604155305e40073d8d1fa4453/68747470733a2f2f6b6f6d617265762e636f6d2f67687076632f3f757365726e616d653d7777772d70726f6a6563742d6e69676874696e67616c6526636f6c6f723d626c7565) [![Medium Badge](https://camo.githubusercontent.com/9f302a84fd9a53e123b43f26b25026f58f463c0a7ae198bad7524d9a16ba3a71/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f2d4072616a616e61676f72692d3033613537613f7374796c653d666c61742d737175617265266c6162656c436f6c6f723d303030303030266c6f676f3d4d656469756d266c696e6b3d68747470733a2f2f6d656469756d2e636f6d2f4072616a616e61676f7269)](https://medium.com/@rajanagori) ## Project Name: Nightingale ================================================== ## Docker for Pentesters: Pentesting Framework ## Description In today’s technological era, docker is the most powerful technology in each and every domain, whether it is Development, cyber security, DevOps, Automation, or Infrastructure. Considering the demand of the industry, I would like to introduce my idea to create a NIGHTINGALE: docker image for pentesters. This docker image is ready to use environment will the required tools that are needed at the time of pentesting on any of the scopes, whether it can be web application penetration testing, network penetration testing, mobile, API, OSINT, or Forensics. The best part is you can either create an altered docker image or pull the pre-built docker image from the hub. Some of the best features are listed below, I would highly recommend going through it and starting penetrating into the application. Link to access tool list : [tool list](https://owasp.org/www-project-nightingale/) ### Pros 1. No need to install multiple programming language support and multiple modules. 2. Booting process is very fast as per the virtualization concept. 3. Need as per use resource of the host machine. 4. All pre-install tools are installed and if you install any new software or tool use can go with that option. 5. You can perform vulnerability assessment and penetration testing of any scope. 6. You can access this docker container via browser by calling your local address. ### Cons 1. You can run the container over cloud server but can’t perform mobile pentesting. 2. Creating tunnel with SSH can’t help you to provide the connection to your physical device or virtual environment. ### Why? The Reason behind creating this Docker file is to make a platform-independent penetration toolkit. It includes all the useful tools that will be required for a penetration tester (You can refer to the tool list section for the same). ## Architecture Diagram of the NIGHTINGALE. [Diagram](https://github.com/RAJANAGORI/Nightingale/blob/main/assets/images/architecture.jpg) ## Docker Image Build and Run - Take a clone of the repository ```auto git clone --depth 1 https://github.com/RAJANAGORI/Nightingale.git ``` - Change the Directory ```auto cd Nightingale ``` - Now build the Docker Image. ```auto docker build -t rajanagori/nightingale . ``` - After Creating the Docker Image, Login into the image and Happy Hacking… 😉 ```auto docker run -ti --hostname nightingale rajanagori/nightingale /bin/bash ``` - Now, you can directly access Nightingale interactive terminal using the browser ```auto docker run -it -p 0.0.0.0:8080:7681 -d rajanagori/nightingale /home/binaries/ttyd -p 7681 bash ``` - If you want to run MobSF along with the nightingale then I will give you good news now you can do the same…!! #### part 1 ```auto docker run -it -p 0.0.0.0:8080:7681 -p 0.0.0.0:8081:8081 -d rajanagori/nightingale /home/binaries/ttyd -p 7681 bash ``` #### part 2 ```auto cd /home/tools_mobile_vapt/Mobile-Security-Framework-MobSF/ source venv/bin/activate ./run 0.0.0.0:8081 & ``` - Call your browser and hit 127.0.0.1:8080 for the nightingale terminal and 127.0.0.1:8081 for MobFs to become you will be prooo!!! - If you want to bind your host machine directory to your container directory then you can do the same. ```auto docker run -it -p 0.0.0.0:8080:7681 -p 0.0.0.0:8081:8081 -v /:/ -d rajanagori/nightingale /home/binaries/ttyd -p 7681 bash ``` ### For Localtunnel - Hit 127.0.0.1:8080 in your browser and you will be able to access the Nightingale terminal - Now, run the following command in your terminal ```auto nvm install v16.14.0 && npm install -g localtunnel ``` and hit this command ```auto lt --port 7681 --subdomain nightingale ``` Now, Click on the link generated and have fun with Nightingale !!! ## To start, Restart and Stop the Postgresql database - To start the service ```auto service postgresql start ``` - To Restart the service ```auto service postgresql restart ``` - To Stop the service ```auto service postgresql stop ``` Note: Use of Postgresql is for msfConsole. Please feel free to contribute to the tool ## GitHub: [https://github.com/RAJANAGORI/Nightingale](https://github.com/RAJANAGORI/Nightingale)