Giter Club home page Giter Club logo

dockerregistrygrabber's Introduction

DockerRegistryGrabber

A python tool to easly enum and dump a Docker Registry.

X Static Badge


Install

git clone [email protected]:Syzik/DockerRegistryGrabber.git
cd DockerRegistryGrabber
python -m pip install -r requirements.txt

Usage

usage: drg.py [-h] [-p port] [-U USERNAME] [-P PASSWORD] [-A header] [--list | --dump_all | --dump DOCKERNAME] url

     ____   ____    ____ 
    |  _ \ |  _ \  / ___|
    | | | || |_) || |  _ 
    | |_| ||  _ < | |_| |
    |____/ |_| \_\ \____|
     Docker Registry grabber tool v2 
     by @SyzikSecu

positional arguments:
  url                URL

options:
  -h, --help         show this help message and exit
  -p port            port to use (default : 5000)

Authentication:
  -U USERNAME        Username
  -P PASSWORD        Password
  -A header          Authorization bearer token

Actions:
  --list
  --dump_all
  --dump DOCKERNAME  DockerName

Example commands:
  python drg.py http://127.0.0.1 --list
  python drg.py http://127.0.0.1 --dump my-ubuntu
  python drg.py http://127.0.0.1 --dump_all
  python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --list
  python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --dump my-ubuntu
  python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --dump_all
  python drg.py https://127.0.0.1 -A '<Auth BEARER TOKEN>' --list
  python drg.py https://127.0.0.1 -A '<Auth BEARER TOKEN>' --dump my-ubuntu
  python drg.py https://127.0.0.1 -A '<Auth BEARER TOKEN>' --dump_all

Without authentification

Listing available images

python drg.py http://127.0.0.1 --list

Dump an image

python drg.py http://127.0.0.1 --dump my-ubuntu

Dump images

python drg.py http://127.0.0.1 --dump_all


With Basic Authentification

Listing available images

python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --list

Dump an image

python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --dump my-ubuntu

Dump images

python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --dump_all

With Authorization bearer Token

Listing available images

python drg.py https://127.0.0.1 -A '<Token>' --list

Dump an image

python drg.py https://127.0.0.1 -A '<Auth Bearer Token>' --dump hosting-app

Dump images

python drg.py https://127.0.0.1 -A '<Auth Bearer Token>' --dump_all

dockerregistrygrabber's People

Contributors

random-robbie avatar scls19fr avatar syzik avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

dockerregistrygrabber's Issues

Prompt for password instead of passing password as CLI argument (because of bash history)

python drg.py https://127.0.0.1 -U 'testuser' -P 'testpassword' --list

Many CLI tools avoid to pass password as CLI argument to avoid this kind of data to be stored into bash history

Maybe you should provide an option to do something like

python drg.py https://127.0.0.1 -U 'testuser' --password --list 
Type password: ...

https://attack.mitre.org/techniques/T1552/003/

" between "..."

console.print(f" [+] Www-Authenticate Header Found : {r.headers.get("Www-Authenticate")}", style="OK")

raises

console.print(f"    [+] Www-Authenticate Header Found : {r.headers.get("Www-Authenticate")}", style="OK")
                                                                        ^^^
SyntaxError: f-string: unmatched '('

Please make sure you have the correct access rights and the repository exists.

Cloning into 'DockerRegistryGrabber'...
The authenticity of host 'github.com (20.87.245.0)' can't be established.
ED25519 key fingerprint is SHA256:+DiY3wvvbpZisF/zLDA0zPMSvHdkr4UvCOqU.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added 'github.com' (ED25519) to the list of known hosts.
[email protected]: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.