A Dockerized penetration testing environment with Kali Linux, ProxyChains, and Tor. Includes tools like Nmap, Metasploit, Nikto, and FFUF to perform anonymous network reconnaissance and scanning through the Tor network. ๐
This project consists of two Docker containers:
- Tor Container: Runs a Tor proxy to route traffic through the Tor network.
- AttackTools Container: A Kali Linux environment with penetration testing tools configured to use the Tor network via ProxyChains.
- Tor proxy configured to allow SOCKS5 connections on port 9050.
- AttackTools container includes:
- Nmap
- ProxyChains4
- Nikto
- FFUF
- Metasploit Framework
- Ping utilities
- Vim
- ProxyChains is configured to route traffic through the Tor container.
- Automated setup of Docker network and environment variables.
Ensure you have Docker installed on your system.
-
Clone this repository:
git clone https://github.com/0xCyberBerserker/Tor-AttackTools.git cd Tor-AttackTools -
Build the Docker images:
chmod +x tor-attacktools.sh ./tor-attacktools.sh
This script will:
- Build the Tor and AttackTools images.
- Create a Docker network.
- Start the Tor container.
- Retrieve the internal IP of the Tor container.
- Start the AttackTools container with the correct Tor configuration.
Run inside the AttackTools container:
checktorIf the output confirms that you are using Tor, everything is correctly set up.
Use proxychains4 before Nmap commands:
proxychains4 nmap -sT -p- <target-ip>pubipIf you get disconnected, you can reattach using:
docker attach attacktoolsTo stop and remove the containers:
docker stop tor attacktoolsTo remove the network:
docker network rm tor_networkYou can use my docker-armaggedon script too.
- The
tor-attacktools.shscript should be run every time you restart your system to ensure correct environment variables and configurations. - Tor may take some time to start up; ensure it is running before using ProxyChains.
This project is for educational and ethical hacking purposes only. Unauthorized scanning or attacks on networks you do not own is illegal.
MIT License. Feel free to use and modify but always follow ethical hacking guidelines.