mirror of
https://github.com/v3n0m-Scanner/V3n0M-Scanner.git
synced 2026-10-16 20:31:35 +08:00
vittring
def5e6722c
This is a combo patch for both the Dockerfile and the Poetry lockfile.
Simplify Poetry installation in Docker image.
* docker/Dockerfile:
set `ARG PYTHON_VERSION` to 3.10
use `${PYTHON_VERSION}-slim-bullseye` as builder from now on
cleanup `RUN` where we install dependencies for the image
cleanup `RUN` where we install Poetry:
update to Poetry 1.2.1 from 1.1.14
keep magic - we like magic - but simplify the installation
This should make installation easier on everyone by explicitly stating
cache location for pip and installing as, yes, root. Installing as user
`venom` is too complicated and this Dockerfile *should* be safe as-is
even running as root. There are still ways to harden to image that don't
require huge lines to add a user environment and it's less hacky this way.
* docker/README:
specify `Yggdrasil` as tag
docker trust no longer functions as expected; remove instructions
building as newly defined tag still works, pull from the hub or build local
* poetry.lock:
Package operations: 0 installs, 8 updates, 0 removals
• Updating idna (3.3 -> 3.4)
• Updating attrs (21.4.0 -> 22.1.0)
• Updating certifi (2022.6.15 -> 2022.9.24)
• Updating pytz (2022.1 -> 2022.4)
• Updating urllib3 (1.26.11 -> 1.26.12)
• Updating aiohttp (3.8.1 -> 3.8.3)
• Updating datetime (4.5 -> 4.7)
• Updating tqdm (4.64.0 -> 4.64.1)
Signed-off-by: vittring <scissortail@riseup.net>
Venom
Offensive Security Framework for Vulnerability Scanning & Pentesting
Warning
: Version 4.3.3 now requires PROXIES/VPN.
Features
- Cloudflare Resolver [Cloudbuster]
- LFI->RCE and XSS Scanning [LFI to RCE & XSS]
- SQL Injection Vuln Scanner [SQLi]
- Extremely Large D0rk Target Lists
- Detects known WAFs
- AdminPage Finding
- CCTV/Networked Interfaces discovery [WIP] <<<<
- Vulnerable FTPs Scanner [Toxin]
- DNS Bruteforcer
- Python 3.6 asyncio based scanning
- Cloudflare resolver
- Extremely quick "Toxin" Vulnerable IP scanner to scan potentially millions of ips for known vulnerable services.
- Free and Open /src/
- Cross-platform Python-based toolkit
- Licensed under GPLv3
- Built by hackers with full transparency
- No more issues with dependencies from pre-alpha release
Install from Docker Hub
Pull it from Docker Hub:
docker pull vittring/venom:yggdrasil
or build bleeding edge from here:
docker build -t vittring/venom:yggdrasil .
docker run --rm -ti vittring/venom:yggdrasil
That's it!
Credits to:
- Architect for the initial encouragement and support in V3n0ms early days
- SageHack for allowing Cloudbuster to be adapted for use within V3n0M
- D35m0nd142 for allowing Collaboration and the use of LFI Suite within V3n0M
- b4ltazar & all members of darkc0de.com for inspiring the project with darkd0rk3r