ottimo / dockerfile-beef

What is it?

This Dockerfile allows to build a Docker image for the BeEF framework for XSS browser exploitation (http://beefproject.com/).

It is based on the phocean/msf image, which means it also contains an up-to-date Metasploit framework for the integration in BeEF.

Build

$ docker build -t phocean/beef .

Run

$ docker run --rm -it --net=host -v /home/phocean/.msf4:/root/.msf4:Z -v /tmp/msf:/tmp/data:Z --name=beef phocean/beef"

Warning:

Using --net=host may cause a security risk if the container gets compromised, because the intruder would have access to any host service listening on the loopback interface. So, do not use it in production and without knowing th risk. A safer option is to map only the ports you need, e.g. with "-p 3000:3000" instead.