Тёмный

Introduction to Docker for CTFs 

LiveOverflow
Подписаться 893 тыс.
Просмотров 127 тыс.
50% 1

I'm using docker more often for CTFs, but it's also useful to host challenges. More CTFs share Dockerfiles to run it locally, so I figured it's time to give an introduction to docker. If you have some other tips or tricks about your workflow, please share it below!
Example challenge and CTF container: github.com/Liv...
DigitalOcean*: m.do.co/c/826f...
=[ ❤️ Support ]=
→ per Video: / liveoverflow
→ per Month: / @liveoverflow
=[ 🐕 Social ]=
→ Twitter: / liveoverflow
→ Website: liveoverflow.com/
→ Subreddit: / liveoverflow
→ Facebook: / liveoverflow
=[ 📄 P.S. ]=
All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

Опубликовано:

 

27 сен 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 163   
@LiveOverflow
@LiveOverflow 4 года назад
Who felt triggered by me using python2?
@tymekl1509
@tymekl1509 4 года назад
Me
@maherazzzouzi279
@maherazzzouzi279 4 года назад
For me python2 is way better than python3 and IDK why xD
@simonkoeck
@simonkoeck 4 года назад
for these purposes python 3 would be better :)
@radosawcymer4557
@radosawcymer4557 4 года назад
Me, 2 minutes too late, but eh
@gcm4312
@gcm4312 4 года назад
I was just scrolling down to comment on this blasphemy!
@nikhilt3755
@nikhilt3755 4 года назад
liveoverflow : docker tutorial everyone: where r u these days ?
@danielmitre
@danielmitre 4 года назад
I made a docker-like program (called doqueru-kun) and a tutorial that made me understand how docker works. Waiting for your next video to link it in my project!
@LiveOverflow
@LiveOverflow 4 года назад
I saw that blog! Very cool project!
@danielmitre
@danielmitre 4 года назад
Thank you! That means a lot for me coming from you!
@SekharPariga
@SekharPariga 4 года назад
@@LiveOverflow can you give me the link for the Blog which your referring here, I'm interested read it as well.
@asparagii2953
@asparagii2953 4 года назад
You could use a bridge network for inter-container communication. With it you don't need to expose any port to the local network and can use the name of the container as IP address
@sundhaug92
@sundhaug92 4 года назад
You can also use docker-compose to create more complex setups, with multiple networks
@rogo7330
@rogo7330 3 года назад
P2P but you are in container. Skynet: nice
@k-ram9
@k-ram9 4 года назад
Please explain Ctrl-C and Ctrl-V.
@ShivamJha00
@ShivamJha00 4 года назад
Lmao what
@berestenkus
@berestenkus 4 года назад
@@selimeneskaraduman6935 i think point was that explanation of docker and everything is so great that it would also great to explain such plain simple thing as copypaste
@reimarpb
@reimarpb 4 года назад
@@ShivamJha00 3:40
@fun_childdhood
@fun_childdhood 3 года назад
Ctrl+C will create a parallel universe
@drawapretzel6003
@drawapretzel6003 4 года назад
>beginning of video: Docker. Docker container. Docker. >Middle of video: docker docks docking docks docker dock >end of video: dakka dakka durka durka docka docka dock i think im going insane XD
@piotrmielnik1404
@piotrmielnik1404 4 года назад
When using VSCode there is that awesome plugin that runs your current workspace on docker, so the set up is much easier and the development is much cleaner.
@LiveOverflow
@LiveOverflow 4 года назад
cool, I should check that out. whats the name?
@piotrmielnik1404
@piotrmielnik1404 4 года назад
@@LiveOverflow it's called "Remote Container"
@jfaustino
@jfaustino 4 года назад
Useful information as always. Thanks LiveOverflow
@Demonslay335
@Demonslay335 4 года назад
So, basically Docker is like a solution to "works on my machine ¯\_(ツ)_/¯" syndrome. 😛
@dipanshujha7293
@dipanshujha7293 4 года назад
Great way of explaining things, kudos to you!!
@MrFudge683
@MrFudge683 4 года назад
holy crap. nice animation.. very descriptive.. do this more often..
@bigbooduh
@bigbooduh Год назад
Love docker, especially when I'm working on a M1 Mac book and need to install tools developed for linux...
@BlackHermit
@BlackHermit 4 года назад
Dockers are truly a gift for CTFs. I love them so much. And the best thing is that Docker Engine was written in Go!
@TheGrimravager
@TheGrimravager 4 года назад
if u want your last container to execute an arbitrary command, you can prefix the command with docker exec -it $(docker ps -lq) maybe someone reads this and finds it useful (in an automated setup ofcourse)
@abc1237844
@abc1237844 4 года назад
Loved it, this was awesome and now I know what to use! Thx
@niteshsurana
@niteshsurana 3 года назад
Hey, a video around pwntools would be awesome!
@thejasonstyle
@thejasonstyle 4 года назад
Keep doing what you are doing! Greets from Germany :-)
@olpqay
@olpqay 4 года назад
aus Deutschland nach Deutschland? 😉
@chickenicecream1942
@chickenicecream1942 4 года назад
@@olpqay does it mean From Germany to Germany or something? I can totally use google translate, but Im making a guess
@olpqay
@olpqay 4 года назад
chickenicecream1942 exactly 😉
@anandmurugana2220
@anandmurugana2220 4 года назад
Awesome Work Man! Good content
@cybersecurity3523
@cybersecurity3523 4 года назад
Welcome back pro
@sharkbeats1397
@sharkbeats1397 4 года назад
*he bacc*
@0xc0ffee_
@0xc0ffee_ 4 года назад
If you want to run something on the host machine ip from a container you don't need to look for the ip you can just use host.docker.internal :)
@Lougehrig10
@Lougehrig10 4 года назад
This intro to docker has made the most sense out of every other explanation I have been given, but I still don't get what the difference between this and a VM is.
@ForTheReallys
@ForTheReallys 4 года назад
The main difference is that with a VM a separate kernel is used for the guest. With containers, the host and guest share a kernel.
@SchoolforHackers
@SchoolforHackers 4 года назад
A VM contains a whole OS (yes, including a kernel), and is a resource hog. A container holds just the files necessary to operate it (like database binaries, for instance ), uses the host kernel, and is much, much lighter and faster.
@MorebitsUK
@MorebitsUK 4 года назад
Ehh Welcome Back! MIssed you, dude!
@sundhaug92
@sundhaug92 4 года назад
Minor correction: Docker on Windows can run without Linux, but usually doesn't
@ferrusmanus4013
@ferrusmanus4013 4 года назад
That's cool
@mehr5821
@mehr5821 Год назад
`docker-compose` is its own package and ‘docker compose` is just docker with the compose plugin, which comes by default. You shouldn’t need the docker-compose package if all you’re doing is basic compose launching.
@elliot_yoyo
@elliot_yoyo 4 года назад
Didn't undertsnad half of the video. But the video is still good, ty
@prodHypeds
@prodHypeds 4 года назад
finally a new video
@norc
@norc 4 года назад
I'm used to use Netcup for servers because a) it's a german service so the data is stored in germany and b) from what I had seen it seemed far less expansive even considering the free bonus I get as a student or by such promotions.
@rajughorai6737
@rajughorai6737 4 года назад
Miss your videos
@elliot9066
@elliot9066 4 года назад
L33t is back :)
@enpassant7358
@enpassant7358 3 года назад
I have a container setup with the Kali Linux Desktop Environment running and I use Reminna to access it; But it slows my machine done as much as a VM does.
@TheBashir007
@TheBashir007 Год назад
Any good ctf list to download I need many of them
@real1cytv
@real1cytv 4 года назад
Please don't run your docker commands as root. That can break some docker images. It is way better to add your user to the docker group, which will give you (for docker) pretty much the same abilities. There is also a really nice utility called ctop(github/bcicen/ctop) which is pretty much htop for docker. Also, look into docker registries (for example hosted on GitLab) to save your Docker images so you don't have to recompile them every time. Also using networks or the deprecated link flag can save you the trouble of exposing hosts to the outside world, and can make it a lot more comprehensible to see which container is connecting to which.
@LiveOverflow
@LiveOverflow 4 года назад
Mh why? I have never had any issues. Ran it as root all the time when using some server. Also access to docker gives you basically root permissions. So I find it a bit weird to not explicitly use sudo and add the group.
@real1cytv
@real1cytv 4 года назад
@@LiveOverflow I had problems with mounted files, and yes its fixable with chown and chmod, but I think its an unnecessary risk right? If the container does get exploited?
@AlbertMikaelyan
@AlbertMikaelyan 4 года назад
Docker containers are run by a separate process and have their own users inside. The user id may collide, and it can cause trouble, but it can access only the directories you have mounted to it - which is the main issue. Look at docker docs, they even say that giving your user docker privileges, is the same as actually giving your user root priveleges - so it is much less safe, than simply running your docker commands with sudo infront.
@3nt3_
@3nt3_ 4 года назад
Have you heared about hetzner.de? It is basically like digital ocean but cheaper. They have server farms in Germany and Finland.
@juliavanderkris5156
@juliavanderkris5156 4 года назад
My go-to VPS host is scaleway, very similar to digitalocean in usage (also pretty flexible) but much cheaper. And they have some pretty nice AMD epyc machines.
@3nt3_
@3nt3_ 4 года назад
@@juliavanderkris5156 Hetzner also has a huge selection of dedicated server models btw. (Also Epyc)
@io_punk8275
@io_punk8275 4 года назад
thx for the vid
@cloufish7790
@cloufish7790 4 года назад
Could you please tell in future video the differences between Packer, Vagrant and Docker? Awesome video! :P
@LiveOverflow
@LiveOverflow 4 года назад
No clue what packer is. But vagrant simply manages virtual machines. What docker really is I will explain next video
@_azer0s
@_azer0s 4 года назад
Packer is a tool from HashiCorp that builds machine images. So unlike Docker, it's not container technology. Vagrant is basically (really oversimplified here) a CLI tool for managing VMs. Packer allows you to "pack" all your programs and whatever you might need, bundles that up and spits out an AMI or VMDK/VMX or OVF file. Basically a dockerfile for VMs.
@TimLF
@TimLF 4 года назад
@@LiveOverflow I never got around to finding out why docker stopped using LXC/LXD/LXCFS...
@yahyaguzide
@yahyaguzide 4 года назад
Hey, ist da ein weg um mit dir zu kommunizieren? habe heute möglicherweise einen iteresanten bug gefunden in einem Parkautomaten. Muss aber mal wieder zurück und austesten ob das wirklich so jedesmal funktioniert. Wenn ja, dann gibt es einen weg um ohne zu bezahlen aus dem parkhaus raus zufahren;)
@tsiaowang8855
@tsiaowang8855 4 года назад
Hi, I have a problem using ctfdocker ---- when using "gdb.attach(io)" with pwntools, how Launch a new terminal in docker container?
@RN-kl4kp
@RN-kl4kp 4 года назад
💥💥💥
@surkewrasoul4711
@surkewrasoul4711 2 года назад
wow this looks so complicated, Makes me hate hacking 😕
@JohnDoe-gr5ih
@JohnDoe-gr5ih 2 года назад
Can I use docker for doing CTFs? Many recommend using a VM to participate in CTFs for security purposes. But are docker containers more secure than a VM sandbox?
@maxvc2330
@maxvc2330 4 года назад
The digital ocean refferral link didnt work for me :((
@sapikotak4596
@sapikotak4596 4 года назад
This is more than docker documentation
@parpid
@parpid 4 года назад
Don't use `sudo` to run docker commands! add your user to the `docker` group instead, no more nagging for passwords for using docker!
@LiveOverflow
@LiveOverflow 4 года назад
I prefer sudo
@webcaptcha
@webcaptcha 4 года назад
it's not secure, read docs
@FredrikHistherRasch
@FredrikHistherRasch 4 года назад
Not (necessarily) true: "Docker on Windows runs a hidden Linux VM" The Windows kernel actually supports something quite similar to the Linux namespaces thingy, called "Containers". When using Docker in Container mode on Windows, no VM is necessary or used. In fact this feature even enables Windows to be able to run both Linux Containers AND Windows containers (yes, you can download and run a Windows 10 container) side-by-side simultaneously.
@Virus3652
@Virus3652 4 года назад
Was looking for that comment
@filipstamcar6553
@filipstamcar6553 4 года назад
Yes, Docker has two types for Windows. One is newer Docker for Windows which uses this Windows functionality for containers (but AFAIK requires Windows 10 Pro) and the other is Docker Toolbox which uses VirtualBox to run boot2docker Linux VM.
@FredrikHistherRasch
@FredrikHistherRasch 4 года назад
@@filipstamcar6553 yes, although Docker will use Hyper-V instead of VirtualBox by default if it wants to use a VM
@vivekblake
@vivekblake 4 года назад
nice content, @liveoverflow I have been following for a while an I have been wanting to start playing RE/ ctf's and I suck at it, I have been looking for a strong basics where I can start and get a hold of the sub, please refer a source since you are good at it I was hoping you would know a better place to begin for a noon.
@syahrulakbarr
@syahrulakbarr 4 года назад
how to doing like gdb.attach on docker ?
@nug203
@nug203 4 года назад
Damn. Awesome. Time to spend the day trawling through docker docs and learning. This is wouldnt work for anything with a gui right? Like a crackme with a window pop up for a password would just have to run on your main host wouldnt it?
@adibytes2
@adibytes2 4 года назад
Willy you can. you can run an X server in the Docker container and ssh with X forwarding on your host.
@teddyfrozevelt
@teddyfrozevelt 4 года назад
It's possible to forward X applications out of the container into your own X session. This requires that you're on Linux, are using X and not Wayland (maybe there's a way to use XWayland, but I don't know how), and set it up in your Dockerfile. somatorio.org/en/post/running-gui-apps-with-docker/
@YoloMonstaaa
@YoloMonstaaa 4 года назад
Finallyyyyyyyy
@Dragiux
@Dragiux 4 года назад
Gasp running docker as super user
@LiveOverflow
@LiveOverflow 4 года назад
Why are you surprised?
@saya1_
@saya1_ 4 года назад
What's CTF?
@RandomNullpointer
@RandomNullpointer 4 года назад
I searched the web and found this: CTF (Capture The Flag) is a kind of information security competition that challenges contestants to solve a variety of tasks ranging from a scavenger hunt on wikipedia to basic programming exercises, to hacking your way into a server to steal data.
@uttiya10
@uttiya10 4 года назад
Is it possible to expose ports for one container to be used by other containers, without exposing it to the host system?
@TimLF
@TimLF 4 года назад
No.
@asparagii2953
@asparagii2953 4 года назад
Yes, you have to use a feature called "bridge network". You create a network (with 'docker network create ') and then when you run a container you add the option '-network '. All the ports will be exposed by default from from inside the network, and you can use the name of the container as IP address alias :)
@SchoolforHackers
@SchoolforHackers 4 года назад
Very much yes. In fact that’s the point.
@SuperSand2000
@SuperSand2000 4 года назад
apt-get install docker.io docker-compose -y
@ruchitmicro8409
@ruchitmicro8409 4 года назад
what is ctfs?
@SchoolforHackers
@SchoolforHackers 4 года назад
Ruchit Micro - Capture The Flag - a contest of breaking into a target and finding special files.
@operativeyork9357
@operativeyork9357 4 года назад
Perhaps first?
@radosawcymer4557
@radosawcymer4557 4 года назад
9:58 WHY PYTHON 2??
@sobertillnoon
@sobertillnoon 4 года назад
All IT work should be security work.
@sobertillnoon
@sobertillnoon 4 года назад
@@homelessrobot you know what? You're right. Keep IT Interesting.
@Vlegel_
@Vlegel_ 4 года назад
Hi
@SuperMarkusparkus
@SuperMarkusparkus 4 года назад
hihi
@tymekl1509
@tymekl1509 4 года назад
13th
@sutsuj6437
@sutsuj6437 4 года назад
It should work on windows. Well yes but actually no.
@FalcoGer
@FalcoGer 2 года назад
I think docker is silly. Why would you download and set up a whole thing that's basically a chroot, just to run some tool? If you don't trust that software then yes, fine. But other than sandboxing, I don't think it's useful for tooling. Maybe I'm thinking about this wrong, but why would i have a container for hashcat and another container for jtr and another container for nmap and another for wfuzz, and so forth. It makes no sense and all you accomplish is wasting your hard drive space on redundant data. And don't tell me that's not how it works, because you literally install stuff with `docker pull`, creating one container image for the one tool you pulled. If you just want a linux environment, feel free to use linux. If you're running on windows you get WSL2. If you are running on mac, get a computer that works and where you don't have to pay for every little thing.
@LiveOverflow
@LiveOverflow 2 года назад
Each app has dependencies that need to be installed. It’s nice to not litter your host system with all these dependencies. Containers are not necessarily used for security. And more about isolation of dependencies and making apps trivial to deploy.
@timm9301
@timm9301 4 года назад
I have actually seen way better docker videos...kind of disappointed.
@PiotrekR-aka-Szpadel
@PiotrekR-aka-Szpadel 4 года назад
OK, if you starting with docker, you probably want to know that: 8:55 When you start container you can ofc give it a name with `--name some_name` (if you do not give any name it will assign some radom one, in this case it was `cool_yonath`) later if you want to exec something it there, instead of using id, you can use that name. Also if you are using if, you don't need to use full id (in fact that id that is displayed when you use `docker ps` is also first 12 characters of id) you need to use enough characters to have single matching result (it might be even only 1 character) ps: if you using distro with selinux enabled, mount your volumes with `:z` at the end, eg: `-v $PWD:/pwd:z` ps2: if you run container with `--link container_name:hostname` you are getting connectivity to mentioned container (`ping hostname`)
@martingregorik2046
@martingregorik2046 4 года назад
you can use first 3 characters of image id to reference the container, which is shorter than typing the name, in most cases
@k3daevin
@k3daevin 4 года назад
@@martingregorik2046 you might even use the first 2 characters if they are unique. But if you recreate the container it has another id, so it is better to give the containers a name. PS: You can use TAB-completition on the container names, so no need for long typing and you have meaningful names.
@MattiaRighetti
@MattiaRighetti 4 года назад
Docker is just amazing, Kubernetees is the next step
@SuperSand2000
@SuperSand2000 4 года назад
What about Consul?
@ko-Daegu
@ko-Daegu 4 года назад
Mattia Righetti I thought we should use both since ya know they serve different purposes Put whatever kubernetes vs docker : ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-2vMEQ5zs1ko.html
@ArquimedesOfficial
@ArquimedesOfficial 4 года назад
@@SuperSand2000 what fuck is consul? marca de geladeira? kkkkk
@zzh1996
@zzh1996 4 года назад
nc host.docker.internal 1024 (instead of finding the IP address of host), or just use the host network when creating the container
@RoiEXLab
@RoiEXLab 4 года назад
Looking forward to the next video. (Also Holy shit, I have the green icon now)
@justonefra
@justonefra 4 года назад
Yeah, the time flies I realized that too some days ago
@Strategic.
@Strategic. 7 месяцев назад
Can you update this man
@smufkin
@smufkin 4 года назад
I was wondering what docker was!
@TheSaintsVEVO
@TheSaintsVEVO 4 года назад
Docker Docs are actually too much to lean food someone not too familiar with it. It can be frustrating and a waste of time. I’d recommend some videos from RU-vid to help you with it
@minghaoliang4311
@minghaoliang4311 4 года назад
I guess using WSL is perfectly fine if not better in this particular use case? A Windows user's point of view
@MilMike
@MilMike 4 года назад
dumb question, what is CTF??
@SchoolforHackers
@SchoolforHackers 4 года назад
MilMike - capture the flag, hacking contests where you try to find a special file on the target.
@shootingshooter2829
@shootingshooter2829 4 года назад
hi first
@shootingshooter2829
@shootingshooter2829 4 года назад
i know its childish
@simonkoeck
@simonkoeck 4 года назад
@@shootingshooter2829 yeah it is
@nasmRE
@nasmRE 4 года назад
Nice x)
@jazzochannel
@jazzochannel 4 года назад
CT-Who?
@Podoco_music
@Podoco_music 4 года назад
these videos are amazing, keep up the great work.
@StephaneMoser
@StephaneMoser 4 года назад
Great video, for me Docker already starts to feel a old tech , because I am already working with Docker for 2 years but it is so rare to see videos for new guys talking about docker. But side note, in the first time you talk about the docker build command was to create a container that it is incorrect, but I think that was just a little mistake
Далее
Solving Pwnable CTF Challenge With Docker Workflow
20:42
How Docker Works - Intro to Namespaces
12:56
Просмотров 168 тыс.
The intro to Docker I wish I had when I started
18:27
Просмотров 111 тыс.
How To Learn Hacking With CTFs
7:44
Просмотров 259 тыс.
Turns out REST APIs weren't the answer (and that's OK!)
10:38
Virtual Machine (VM) vs Docker
8:52
Просмотров 204 тыс.
Using docker in unusual ways
12:58
Просмотров 449 тыс.
How To Protect Your Linux Server From Hackers!
20:38
Просмотров 301 тыс.
Hacker Tweets Explained
13:47
Просмотров 159 тыс.
Deepdive Containers - Kernel Sources and nsenter
11:46