🐳 RAUDI: Regularly and Automatically Updated Docker Images

RAUDI (Regularly and Automatically Updated Docker Images) automatically generates and keep updated a series of Docker Images through GitHub Actions for tools that are not provided by the developers.

What is RAUDI
Fork
Setup
Test
Local Usage
Available Tools
Tool Structure
Helpers
Examples
How to Pronounce
Contributions
Credits
License

What is RAUDI

RAUDI is what will save you from creating and managing a lot of Docker Images manually. Every time a software is updated you need to update the Docker Image if you want to use the latest features, the dependencies are not working anymore.

This is messy and time-consuming.

Don't worry anymore, we got you covered.

You may either fork this repo and use the GitHub Workflow yourself or use it locally (and manage its execution the way you want).

Fork

If you want to fork this repo you also have to set up some secrets to be able to push your images on your personal Docker Hub account. Two GitHub secrets must be set:

DOCKER_USER: Your Docker Hub Username;
DOCKER_API_TOKEN: Your Docker Hub Password or API Token.

After setting those secrets you have to edit the organization variable set in the tools/main.py file since it is configured to push on the Docker Hub for SecSI.

That's all guys: go to Action, enable it for your forked repo, wait until midnight, and the Workflow will do the heavy work!

Setup

This repo can also be executed locally. The requirements to be met are the following:

Python 3.x
Docker (with BuildX)

Here is the documentation for working with BuildX: https://docs.docker.com/buildx/working-with-buildx/

The setup phase is pretty straightforward, you just need the following commands:

git clone https://github.com/cybersecsi/RAUDI
cd RAUDI
pip install -r requirements.txt

You're ready to go!

Test

To run the test you need to install pytest with the command pip install pytest (it is not in requirements.txt since it is needed only for testing purposes) and then you may run:

pytest -s

python -m pytest -s

to run the tests.

Local Usage

RAUDI can build and push all the tools that are put into the tools directory. There are different options that can be used when running it. Before using it locally you should create a .env file (you can just copy the .env.sample file) and add your GitHub Personal Access Token to avoid Rate Limiting. For unauthenticated users GitHub allows up to 60 requests per hour, while authenticated users are allowed up to 15.000 requests per hour. For this reason we advice you to add it! You can also create a personal access token without any scope since anything we do is read some info for every GitHub repo.

Execution Modes

Normal Execution

In this mode RAUDI tries to build all the tools if needed. The command to run it is simply:

python3 ./raudi.py --all

Single Build

In this mode RAUDI tries to build only the specified tool. The command in this case is:

python3 ./raudi.py --single <tool_name>

tool_name MUST be the name of the directory inside the tools folder.

Test tool

Since the tests parameter has been added to the configuration structure of the tool is can be helpful to test if the inserted commands do return a 0 status code. The command to test a specific tool is:

python3 ./raudi.py --test <tool_name>

tool_name MUST be the name of the directory inside the tools folder.

Show tools

If you want to know the available tools you can run this command:

python3 ./raudi.py --list

Bootstrap tool

If you want to quickly add a new tool folder starting from one of the available templates you can run this command:

python3 ./raudi.py --bootstrap <new_tool_name>

Options

| Option | Description | Default Value | | -------- | --------------------------------------------------------------------- | ------------- | | --push | Whether automatically push to Docker Hub | False | | --remote | Whether check against Docker Hub instead of local Docker before build | False | | --force | Whether build or not if an image with the same tagname has been found | False |

Available Tools

This is the current list of tools that have been added. Those are all tools that do not have an official Docker Image provided by the developer:

| Name | Docker Image | -------------------------- | -------------------- | 3proxy | secsi/3proxy | Altdns | secsi/altdns | Apktool | secsi/apktool | Arjun | secsi/arjun | bfac | secsi/bfac | CloudFail | secsi/cloudfail | CMSeeK | secsi/cmseek | Crowbar | secsi/crowbar | Dalfox | secsi/dalfox | datasploit | secsi/datasploit | dex2jar | secsi/dex2jar | dirb | secsi/dirb | dirhunt | secsi/dirhunt | dirsearch | secsi/dirsearch | dnscan | secsi/dnscan | Dorks Eye | secsi/dorks-eye | dvcs-ripper | secsi/dvcs-ripper | ExifTool | secsi/exiftool | EyeWitness | secsi/eyewitness | fast-recon | secsi/fast-recon | ffuf | secsi/ffuf | fierce | secsi/fierce | Findsploit | secsi/findsploit | GetJS | secsi/getjs | gf | secsi/gf | Gitrob | secsi/gitrob | GitTools | secsi/gittools | gobuster | secsi/gobuster | GoogD0rker | secsi/googd0rker | GoSpider | secsi/gospider | Ground control | secsi/ground-control | Hakrawler | secsi/hakrawler | hakrevdns | secsi/hakrevdns | hashID | secsi/hashid | httprobe | secsi/httprobe | hydra | secsi/hydra | impacket | secsi/impacket | JoomScan | secsi/joomscan | JSON Hero | secsi/jsonhero | The JSON Web Token Toolkit | secsi/jwt_tool | knock | secsi/knockpy | LFI Suite | secsi/lfisuite | Source | | ------------------------------------------------ | | https://github.com/3proxy/3proxy | | https://github.com/infosec-au/altdns | | https://github.com/iBotPeaches/Apktool | | https://github.com/s0md3v/Arjun | | https://github.com/mazen160/bfac | | https://github.com/m0rtem/CloudFail | | https://github.com/Tuhinshubhra/CMSeeK | | https://github.com/galkan/crowbar | | https://github.com/hahwul/dalfox | | https://github.com/DataSploit/datasploit | | https://github.com/pxb1988/dex2jar | | http://dirb.sourceforge.net/ | | https://github.com/Nekmo/dirhunt | | https://github.com/maurosoria/dirsearch | | https://github.com/rbsec/dnscan | | https://github.com/BullsEye0/dorks-eye | | https://github.com/kost/dvcs-ripper | | https://github.com/exiftool/exiftool | | https://github.com/FortyNorthSecurity/EyeWitness | | https://github.com/DanMcInerney/fast-recon | | https://github.com/ffuf/ffuf | | https://github.com/mschwager/fierce | | https://github.com/1N3/Findsploit | | https://github.com/003random/getJS | | https://github.com/tomnomnom/gf | | https://github.com/michenriksen/gitrob | | https://github.com/internetwache/GitTool | | https://github.com/OJ/gobuster | | https://github.com/ZephrFish/GoogD0rker | | https://github.com/jaeles-project/gospider | | https://github.com/jobertabma/ground-control | | https://github.com/hakluke/hakrawler | | https://github.com/hakluke/hakrevdns | | https://github.com/psypanda/hashID | | https://github.com/tomnomnom/httprobe | | https://github.com/vanhauser-thc/thc-hydra | | https://github.com/SecureAuthCorp/impacket | | https://github.com/OWASP/joomscan | | https://github.com/triggerdotdev/jsonhero-web | | https://github.com/ticarpi/jwt_tool | | https://github.com/guelfoweb/knock | | https://github.com/D35

RAUDI

Install / Use

README