Create docker-bench-websploit.sh

This commit is contained in:
Omar Santos 2021-04-11 17:31:55 -04:00
parent aa1432596b
commit 9c3d34cb67

View File

@ -0,0 +1,17 @@
# A quick script to run docker-bench-security in WebSploit Labs
echo "Running docker-bench-security from WebSploit"
docker run --rm --net host --pid host --userns host --cap-add audit_control \
-e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
-v /etc:/etc:ro \
-v /lib/systemd/system:/lib/systemd/system:ro \
-v /usr/bin/containerd:/usr/bin/containerd:ro \
-v /usr/bin/runc:/usr/bin/runc:ro \
-v /usr/lib/systemd:/usr/lib/systemd:ro \
-v /var/lib:/var/lib:ro \
-v /var/run/docker.sock:/var/run/docker.sock:ro \
--label docker_bench_security \
docker/docker-bench-security > bench_results.txt
echo "The results have been stored at $(pwd)/bench_results.txt "