Introduction to Docker for CTFs

  Рет қаралды 124,816

LiveOverflow

LiveOverflow

4 жыл бұрын

I'm using docker more often for CTFs, but it's also useful to host challenges. More CTFs share Dockerfiles to run it locally, so I figured it's time to give an introduction to docker. If you have some other tips or tricks about your workflow, please share it below!
Example challenge and CTF container: github.com/LiveOverflow/pwn_d...
DigitalOcean*: m.do.co/c/826f195e2288
=[ ❤️ Support ]=
→ per Video: / liveoverflow
→ per Month: / @liveoverflow
=[ 🐕 Social ]=
→ Twitter: / liveoverflow
→ Website: liveoverflow.com/
→ Subreddit: / liveoverflow
→ Facebook: / liveoverflow
=[ 📄 P.S. ]=
All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

Пікірлер: 163
@LiveOverflow
@LiveOverflow 4 жыл бұрын
Who felt triggered by me using python2?
@tymekl1509
@tymekl1509 4 жыл бұрын
Me
@maherazzzouzi279
@maherazzzouzi279 4 жыл бұрын
For me python2 is way better than python3 and IDK why xD
@simonkoeck
@simonkoeck 4 жыл бұрын
for these purposes python 3 would be better :)
@radosawcymer4557
@radosawcymer4557 4 жыл бұрын
Me, 2 minutes too late, but eh
@gcm4312
@gcm4312 4 жыл бұрын
I was just scrolling down to comment on this blasphemy!
@nikhilt3755
@nikhilt3755 4 жыл бұрын
liveoverflow : docker tutorial everyone: where r u these days ?
@PiotrekR-aka-Szpadel
@PiotrekR-aka-Szpadel 4 жыл бұрын
OK, if you starting with docker, you probably want to know that: 8:55 When you start container you can ofc give it a name with `--name some_name` (if you do not give any name it will assign some radom one, in this case it was `cool_yonath`) later if you want to exec something it there, instead of using id, you can use that name. Also if you are using if, you don't need to use full id (in fact that id that is displayed when you use `docker ps` is also first 12 characters of id) you need to use enough characters to have single matching result (it might be even only 1 character) ps: if you using distro with selinux enabled, mount your volumes with `:z` at the end, eg: `-v $PWD:/pwd:z` ps2: if you run container with `--link container_name:hostname` you are getting connectivity to mentioned container (`ping hostname`)
@martingregorik2046
@martingregorik2046 4 жыл бұрын
you can use first 3 characters of image id to reference the container, which is shorter than typing the name, in most cases
@k3daevin
@k3daevin 4 жыл бұрын
@@martingregorik2046 you might even use the first 2 characters if they are unique. But if you recreate the container it has another id, so it is better to give the containers a name. PS: You can use TAB-completition on the container names, so no need for long typing and you have meaningful names.
@jfaustino
@jfaustino 4 жыл бұрын
Useful information as always. Thanks LiveOverflow
@dipanshujha7293
@dipanshujha7293 4 жыл бұрын
Great way of explaining things, kudos to you!!
@abc1237844
@abc1237844 4 жыл бұрын
Loved it, this was awesome and now I know what to use! Thx
@Podoco_music
@Podoco_music 4 жыл бұрын
these videos are amazing, keep up the great work.
@k-ram9
@k-ram9 4 жыл бұрын
Please explain Ctrl-C and Ctrl-V.
@ShivamJha00
@ShivamJha00 4 жыл бұрын
Lmao what
@berestenkus
@berestenkus 3 жыл бұрын
@@selimeneskaraduman6935 i think point was that explanation of docker and everything is so great that it would also great to explain such plain simple thing as copypaste
@reimarpb
@reimarpb 3 жыл бұрын
@@ShivamJha00 3:40
@fun_childdhood
@fun_childdhood 3 жыл бұрын
Ctrl+C will create a parallel universe
@anandmurugana2220
@anandmurugana2220 4 жыл бұрын
Awesome Work Man! Good content
@asparagii2953
@asparagii2953 4 жыл бұрын
You could use a bridge network for inter-container communication. With it you don't need to expose any port to the local network and can use the name of the container as IP address
@sundhaug92
@sundhaug92 4 жыл бұрын
You can also use docker-compose to create more complex setups, with multiple networks
@rogo7330
@rogo7330 3 жыл бұрын
P2P but you are in container. Skynet: nice
@zzh1996
@zzh1996 4 жыл бұрын
nc host.docker.internal 1024 (instead of finding the IP address of host), or just use the host network when creating the container
@cybersecurity3523
@cybersecurity3523 4 жыл бұрын
Welcome back pro
@MrFudge683
@MrFudge683 4 жыл бұрын
holy crap. nice animation.. very descriptive.. do this more often..
@danielmitre
@danielmitre 4 жыл бұрын
I made a docker-like program (called doqueru-kun) and a tutorial that made me understand how docker works. Waiting for your next video to link it in my project!
@LiveOverflow
@LiveOverflow 4 жыл бұрын
I saw that blog! Very cool project!
@danielmitre
@danielmitre 4 жыл бұрын
Thank you! That means a lot for me coming from you!
@SekharPariga
@SekharPariga 4 жыл бұрын
@@LiveOverflow can you give me the link for the Blog which your referring here, I'm interested read it as well.
@drawapretzel6003
@drawapretzel6003 4 жыл бұрын
>beginning of video: Docker. Docker container. Docker. >Middle of video: docker docks docking docks docker dock >end of video: dakka dakka durka durka docka docka dock i think im going insane XD
@niteshsurana
@niteshsurana 3 жыл бұрын
Hey, a video around pwntools would be awesome!
@piotrmielnik1404
@piotrmielnik1404 4 жыл бұрын
When using VSCode there is that awesome plugin that runs your current workspace on docker, so the set up is much easier and the development is much cleaner.
@LiveOverflow
@LiveOverflow 4 жыл бұрын
cool, I should check that out. whats the name?
@piotrmielnik1404
@piotrmielnik1404 4 жыл бұрын
@@LiveOverflow it's called "Remote Container"
@MorebitsUK
@MorebitsUK 4 жыл бұрын
Ehh Welcome Back! MIssed you, dude!
@prodHypeds
@prodHypeds 4 жыл бұрын
finally a new video
@norc
@norc 4 жыл бұрын
I'm used to use Netcup for servers because a) it's a german service so the data is stored in germany and b) from what I had seen it seemed far less expansive even considering the free bonus I get as a student or by such promotions.
@MattiaRighetti
@MattiaRighetti 4 жыл бұрын
Docker is just amazing, Kubernetees is the next step
@SuperSand2000
@SuperSand2000 4 жыл бұрын
What about Consul?
@ko-Daegu
@ko-Daegu 4 жыл бұрын
Mattia Righetti I thought we should use both since ya know they serve different purposes Put whatever kubernetes vs docker : kzfaq.info/get/bejne/aNx9eLRm39mVm6M.html
@ArquimedesOfficial
@ArquimedesOfficial 4 жыл бұрын
@@SuperSand2000 what fuck is consul? marca de geladeira? kkkkk
@ferrusmanus4013
@ferrusmanus4013 4 жыл бұрын
That's cool
@RoiEXLab
@RoiEXLab 4 жыл бұрын
Looking forward to the next video. (Also Holy shit, I have the green icon now)
@justonefra
@justonefra 4 жыл бұрын
Yeah, the time flies I realized that too some days ago
@smufkin
@smufkin 4 жыл бұрын
I was wondering what docker was!
@sharkbeats1397
@sharkbeats1397 4 жыл бұрын
*he bacc*
@io_punk8275
@io_punk8275 4 жыл бұрын
thx for the vid
@elliot9066
@elliot9066 4 жыл бұрын
L33t is back :)
@thejasonstyle
@thejasonstyle 4 жыл бұрын
Keep doing what you are doing! Greets from Germany :-)
@olpqay
@olpqay 4 жыл бұрын
aus Deutschland nach Deutschland? 😉
@chickenicecream1942
@chickenicecream1942 4 жыл бұрын
@@olpqay does it mean From Germany to Germany or something? I can totally use google translate, but Im making a guess
@olpqay
@olpqay 4 жыл бұрын
chickenicecream1942 exactly 😉
@syahrulakbarr
@syahrulakbarr 4 жыл бұрын
how to doing like gdb.attach on docker ?
@TheGrimravager
@TheGrimravager 4 жыл бұрын
if u want your last container to execute an arbitrary command, you can prefix the command with docker exec -it $(docker ps -lq) maybe someone reads this and finds it useful (in an automated setup ofcourse)
@tsiaowang8855
@tsiaowang8855 4 жыл бұрын
Hi, I have a problem using ctfdocker ---- when using "gdb.attach(io)" with pwntools, how Launch a new terminal in docker container?
@enpassant7358
@enpassant7358 2 жыл бұрын
I have a container setup with the Kali Linux Desktop Environment running and I use Reminna to access it; But it slows my machine done as much as a VM does.
@nasmRE
@nasmRE 4 жыл бұрын
Nice x)
@TheBashir007
@TheBashir007 11 ай бұрын
Any good ctf list to download I need many of them
@StephaneMoser
@StephaneMoser 4 жыл бұрын
Great video, for me Docker already starts to feel a old tech , because I am already working with Docker for 2 years but it is so rare to see videos for new guys talking about docker. But side note, in the first time you talk about the docker build command was to create a container that it is incorrect, but I think that was just a little mistake
@vivekblake
@vivekblake 4 жыл бұрын
nice content, @liveoverflow I have been following for a while an I have been wanting to start playing RE/ ctf's and I suck at it, I have been looking for a strong basics where I can start and get a hold of the sub, please refer a source since you are good at it I was hoping you would know a better place to begin for a noon.
@rajughorai6737
@rajughorai6737 4 жыл бұрын
Miss your videos
@0xc0ffee_
@0xc0ffee_ 4 жыл бұрын
If you want to run something on the host machine ip from a container you don't need to look for the ip you can just use host.docker.internal :)
@bigbooduh
@bigbooduh Жыл бұрын
Love docker, especially when I'm working on a M1 Mac book and need to install tools developed for linux...
@RN-kl4kp
@RN-kl4kp 3 жыл бұрын
💥💥💥
@maxvc2330
@maxvc2330 4 жыл бұрын
The digital ocean refferral link didnt work for me :((
@YoloMonstaaa
@YoloMonstaaa 4 жыл бұрын
Finallyyyyyyyy
@JohnDoe-gr5ih
@JohnDoe-gr5ih 2 жыл бұрын
Can I use docker for doing CTFs? Many recommend using a VM to participate in CTFs for security purposes. But are docker containers more secure than a VM sandbox?
@Demonslay335
@Demonslay335 4 жыл бұрын
So, basically Docker is like a solution to "works on my machine ¯\_(ツ)_/¯" syndrome. 😛
@cloufish7790
@cloufish7790 4 жыл бұрын
Could you please tell in future video the differences between Packer, Vagrant and Docker? Awesome video! :P
@LiveOverflow
@LiveOverflow 4 жыл бұрын
No clue what packer is. But vagrant simply manages virtual machines. What docker really is I will explain next video
@_azer0s
@_azer0s 4 жыл бұрын
Packer is a tool from HashiCorp that builds machine images. So unlike Docker, it's not container technology. Vagrant is basically (really oversimplified here) a CLI tool for managing VMs. Packer allows you to "pack" all your programs and whatever you might need, bundles that up and spits out an AMI or VMDK/VMX or OVF file. Basically a dockerfile for VMs.
@TimLF
@TimLF 4 жыл бұрын
@@LiveOverflow I never got around to finding out why docker stopped using LXC/LXD/LXCFS...
@Lougehrig10
@Lougehrig10 4 жыл бұрын
This intro to docker has made the most sense out of every other explanation I have been given, but I still don't get what the difference between this and a VM is.
@ForTheReallys
@ForTheReallys 4 жыл бұрын
The main difference is that with a VM a separate kernel is used for the guest. With containers, the host and guest share a kernel.
@SchoolforHackers
@SchoolforHackers 4 жыл бұрын
A VM contains a whole OS (yes, including a kernel), and is a resource hog. A container holds just the files necessary to operate it (like database binaries, for instance ), uses the host kernel, and is much, much lighter and faster.
@elliot_yoyo
@elliot_yoyo 4 жыл бұрын
Didn't undertsnad half of the video. But the video is still good, ty
@nug203
@nug203 4 жыл бұрын
Damn. Awesome. Time to spend the day trawling through docker docs and learning. This is wouldnt work for anything with a gui right? Like a crackme with a window pop up for a password would just have to run on your main host wouldnt it?
@adibytes2
@adibytes2 4 жыл бұрын
Willy you can. you can run an X server in the Docker container and ssh with X forwarding on your host.
@teddyfrozevelt
@teddyfrozevelt 4 жыл бұрын
It's possible to forward X applications out of the container into your own X session. This requires that you're on Linux, are using X and not Wayland (maybe there's a way to use XWayland, but I don't know how), and set it up in your Dockerfile. somatorio.org/en/post/running-gui-apps-with-docker/
@sundhaug92
@sundhaug92 4 жыл бұрын
Minor correction: Docker on Windows can run without Linux, but usually doesn't
@3nt3_
@3nt3_ 4 жыл бұрын
Have you heared about hetzner.de? It is basically like digital ocean but cheaper. They have server farms in Germany and Finland.
@juliavanderkris5156
@juliavanderkris5156 4 жыл бұрын
My go-to VPS host is scaleway, very similar to digitalocean in usage (also pretty flexible) but much cheaper. And they have some pretty nice AMD epyc machines.
@3nt3_
@3nt3_ 4 жыл бұрын
@@juliavanderkris5156 Hetzner also has a huge selection of dedicated server models btw. (Also Epyc)
@uttiya10
@uttiya10 4 жыл бұрын
Is it possible to expose ports for one container to be used by other containers, without exposing it to the host system?
@TimLF
@TimLF 4 жыл бұрын
No.
@asparagii2953
@asparagii2953 4 жыл бұрын
Yes, you have to use a feature called "bridge network". You create a network (with 'docker network create ') and then when you run a container you add the option '-network '. All the ports will be exposed by default from from inside the network, and you can use the name of the container as IP address alias :)
@SchoolforHackers
@SchoolforHackers 4 жыл бұрын
Very much yes. In fact that’s the point.
@yahyaguzide
@yahyaguzide 4 жыл бұрын
Hey, ist da ein weg um mit dir zu kommunizieren? habe heute möglicherweise einen iteresanten bug gefunden in einem Parkautomaten. Muss aber mal wieder zurück und austesten ob das wirklich so jedesmal funktioniert. Wenn ja, dann gibt es einen weg um ohne zu bezahlen aus dem parkhaus raus zufahren;)
@BlackHermit
@BlackHermit 4 жыл бұрын
Dockers are truly a gift for CTFs. I love them so much. And the best thing is that Docker Engine was written in Go!
@sapikotak4596
@sapikotak4596 4 жыл бұрын
This is more than docker documentation
@Strategic.
@Strategic. 4 ай бұрын
Can you update this man
@mehr5821
@mehr5821 Жыл бұрын
`docker-compose` is its own package and ‘docker compose` is just docker with the compose plugin, which comes by default. You shouldn’t need the docker-compose package if all you’re doing is basic compose launching.
@minghaoliang4311
@minghaoliang4311 4 жыл бұрын
I guess using WSL is perfectly fine if not better in this particular use case? A Windows user's point of view
@SuperSand2000
@SuperSand2000 4 жыл бұрын
apt-get install docker.io docker-compose -y
@Dragiux
@Dragiux 4 жыл бұрын
Gasp running docker as super user
@LiveOverflow
@LiveOverflow 4 жыл бұрын
Why are you surprised?
@operativeyork9357
@operativeyork9357 4 жыл бұрын
Perhaps first?
@ruchitmicro8409
@ruchitmicro8409 4 жыл бұрын
what is ctfs?
@SchoolforHackers
@SchoolforHackers 4 жыл бұрын
Ruchit Micro - Capture The Flag - a contest of breaking into a target and finding special files.
@surkewrasoul4711
@surkewrasoul4711 Жыл бұрын
wow this looks so complicated, Makes me hate hacking 😕
@FredrikHistherRasch
@FredrikHistherRasch 4 жыл бұрын
Not (necessarily) true: "Docker on Windows runs a hidden Linux VM" The Windows kernel actually supports something quite similar to the Linux namespaces thingy, called "Containers". When using Docker in Container mode on Windows, no VM is necessary or used. In fact this feature even enables Windows to be able to run both Linux Containers AND Windows containers (yes, you can download and run a Windows 10 container) side-by-side simultaneously.
@Virus3652
@Virus3652 4 жыл бұрын
Was looking for that comment
@filipstamcar6553
@filipstamcar6553 4 жыл бұрын
Yes, Docker has two types for Windows. One is newer Docker for Windows which uses this Windows functionality for containers (but AFAIK requires Windows 10 Pro) and the other is Docker Toolbox which uses VirtualBox to run boot2docker Linux VM.
@FredrikHistherRasch
@FredrikHistherRasch 4 жыл бұрын
@@filipstamcar6553 yes, although Docker will use Hyper-V instead of VirtualBox by default if it wants to use a VM
@MilMike
@MilMike 4 жыл бұрын
dumb question, what is CTF??
@SchoolforHackers
@SchoolforHackers 4 жыл бұрын
MilMike - capture the flag, hacking contests where you try to find a special file on the target.
@Vlegel_
@Vlegel_ 4 жыл бұрын
Hi
@SuperMarkusparkus
@SuperMarkusparkus 4 жыл бұрын
hihi
@saya1_
@saya1_ 4 жыл бұрын
What's CTF?
@RandomNullpointer
@RandomNullpointer 4 жыл бұрын
I searched the web and found this: CTF (Capture The Flag) is a kind of information security competition that challenges contestants to solve a variety of tasks ranging from a scavenger hunt on wikipedia to basic programming exercises, to hacking your way into a server to steal data.
@radosawcymer4557
@radosawcymer4557 4 жыл бұрын
9:58 WHY PYTHON 2??
@parpid
@parpid 4 жыл бұрын
Don't use `sudo` to run docker commands! add your user to the `docker` group instead, no more nagging for passwords for using docker!
@LiveOverflow
@LiveOverflow 4 жыл бұрын
I prefer sudo
@webcaptcha
@webcaptcha 4 жыл бұрын
it's not secure, read docs
@jazzochannel
@jazzochannel 4 жыл бұрын
CT-Who?
@real1cytv
@real1cytv 4 жыл бұрын
Please don't run your docker commands as root. That can break some docker images. It is way better to add your user to the docker group, which will give you (for docker) pretty much the same abilities. There is also a really nice utility called ctop(github/bcicen/ctop) which is pretty much htop for docker. Also, look into docker registries (for example hosted on GitLab) to save your Docker images so you don't have to recompile them every time. Also using networks or the deprecated link flag can save you the trouble of exposing hosts to the outside world, and can make it a lot more comprehensible to see which container is connecting to which.
@LiveOverflow
@LiveOverflow 4 жыл бұрын
Mh why? I have never had any issues. Ran it as root all the time when using some server. Also access to docker gives you basically root permissions. So I find it a bit weird to not explicitly use sudo and add the group.
@real1cytv
@real1cytv 4 жыл бұрын
@@LiveOverflow I had problems with mounted files, and yes its fixable with chown and chmod, but I think its an unnecessary risk right? If the container does get exploited?
@AlbertMikaelyan
@AlbertMikaelyan 4 жыл бұрын
Docker containers are run by a separate process and have their own users inside. The user id may collide, and it can cause trouble, but it can access only the directories you have mounted to it - which is the main issue. Look at docker docs, they even say that giving your user docker privileges, is the same as actually giving your user root priveleges - so it is much less safe, than simply running your docker commands with sudo infront.
@shootingshooter2829
@shootingshooter2829 4 жыл бұрын
hi first
@shootingshooter2829
@shootingshooter2829 4 жыл бұрын
i know its childish
@simonkoeck
@simonkoeck 4 жыл бұрын
@@shootingshooter2829 yeah it is
@tymekl1509
@tymekl1509 4 жыл бұрын
13th
@sobertillnoon
@sobertillnoon 4 жыл бұрын
All IT work should be security work.
@sobertillnoon
@sobertillnoon 4 жыл бұрын
@@homelessrobot you know what? You're right. Keep IT Interesting.
@TheSaintsVEVO
@TheSaintsVEVO 4 жыл бұрын
Docker Docs are actually too much to lean food someone not too familiar with it. It can be frustrating and a waste of time. I’d recommend some videos from KZfaq to help you with it
@sutsuj6437
@sutsuj6437 4 жыл бұрын
It should work on windows. Well yes but actually no.
@FalcoGer
@FalcoGer Жыл бұрын
I think docker is silly. Why would you download and set up a whole thing that's basically a chroot, just to run some tool? If you don't trust that software then yes, fine. But other than sandboxing, I don't think it's useful for tooling. Maybe I'm thinking about this wrong, but why would i have a container for hashcat and another container for jtr and another container for nmap and another for wfuzz, and so forth. It makes no sense and all you accomplish is wasting your hard drive space on redundant data. And don't tell me that's not how it works, because you literally install stuff with `docker pull`, creating one container image for the one tool you pulled. If you just want a linux environment, feel free to use linux. If you're running on windows you get WSL2. If you are running on mac, get a computer that works and where you don't have to pay for every little thing.
@LiveOverflow
@LiveOverflow Жыл бұрын
Each app has dependencies that need to be installed. It’s nice to not litter your host system with all these dependencies. Containers are not necessarily used for security. And more about isolation of dependencies and making apps trivial to deploy.
@timm9301
@timm9301 4 жыл бұрын
I have actually seen way better docker videos...kind of disappointed.
Solving Pwnable CTF Challenge With Docker Workflow
20:42
LiveOverflow
Рет қаралды 59 М.
How Docker Works - Intro to Namespaces
12:56
LiveOverflow
Рет қаралды 163 М.
OMG🤪 #tiktok #shorts #potapova_blog
00:50
Potapova_blog
Рет қаралды 17 МЛН
Luck Decides My Future Again 🍀🍀🍀 #katebrush #shorts
00:19
Kate Brush
Рет қаралды 8 МЛН
I’m just a kid 🥹🥰 LeoNata family #shorts
00:12
LeoNata Family
Рет қаралды 17 МЛН
КАРМАНЧИК 2 СЕЗОН 7 СЕРИЯ ФИНАЛ
21:37
Inter Production
Рет қаралды 252 М.
How to scan the internet for websites/servers with MASSCAN
1:32
Anton Aparin
Рет қаралды 2,2 М.
Making Simple Windows Driver in C
7:26
Nir Lichtman
Рет қаралды 326 М.
Making an Entity Component System for my game engine
4:50
I've been Hacking for 10 Years! (Stripe CTF Speedrun)
28:58
LiveOverflow
Рет қаралды 66 М.
What is Docker in 5 minutes
5:19
TechSquidTV
Рет қаралды 780 М.
Glitching and Fault Injection: Writing a Python Script for the Glitcher
1:02
Advanced Security Training
Рет қаралды 327
Nix flakes explained
7:22
Vimjoyer
Рет қаралды 65 М.
CTF Web_python_template_injection
4:21
COZT
Рет қаралды 16
OMG🤪 #tiktok #shorts #potapova_blog
00:50
Potapova_blog
Рет қаралды 17 МЛН