imaia / golismero-suite

Docker-compose based Golismero pentesting suite with various plugins services

Golismero Suite

http://github.com/pebble/golismero-suite

About

This repo aims to simplify the setup and usage of the Golismero pentesting suite and the various dependencies services it requires with automation use cases in mind.

Requirements

• docker 1.12.0+
• docker-compose 1.8.0+

Usage

1. Clone

   git clone [e-mail]:pebble/golismero-suite.git golismero
   cd golismero

2. Configure

   cp .env.sample .env
   vim .env

3. Scan

   make run

Deployment

The easiest way to deploy this at the moment is via Docker Machine to a pentesting-friendly VPS service such as DigitalOcean.

1. Obtain DigitalOcean Access Token.

   Visit: https://cloud.digitalocean.com/settings/api/tokens

2. Provision server

   docker-machine create \
     --driver digitalocean
     --digitalocean-access-token=YOUR_ACCESS_TOKEN
     --digitalocean-image=ubuntu-16-04-x64
     golismero

3. File a ticket with support

Golismero is very noisy and freaks out VPS support teams. Get a note placed on your account that lots of strange pentesting activity is expected to avoid problems.

4. Run Golismero

   eval $(docker-machine env golismero)
   make run