donaldrich/kali-linux

Overview

This is an unofficial Kali-rolling image, built because I want to tinker with Kali on my Raspberry Pi, but kept running into issues running the official Kali RPI ISO. Raspbian, Docker, and this image have been a stable implementation for me.

And as an added bonus... if you break something, no lengthy reinstall or SD card flashing required. Thanks Docker!

Architecture

Tags

• Additional packages can be installed on top of this image. See kali-metapackages. Once the kinks are ironed out and the build pipeline is quick and stable, I will probably add some beefier tags. The challenge is not the build, but successfully pushing to Docker Hub, possibly due to the added mass of multiple architectures.

• Historic builds available, tagged appended with build date

Disclaimer

• This is very much a personal hobby project, non-latest tags will be added, subtracted, and change without warning or documentation.

That said...

• The latest tag will always be kali-linux-core+SSH, always be armhf compatible, and always be documented (if for some reason the previous three always are altered!) It is the base layer used to build the other tags, and is the closest thing to a stable tag for this image. I’m spelling that out, because after my ISO struggles, lack of other Pi-compatible images, and because Kali is such an awesome set of tools, I want to do my part to make sure this image is accessible and usable for fellow Pi pen-testers!

Extra Goodies

I have added some non-Kali packages in tags wifi and wifi-pass

These are already installed.

projectdiscovery.io

https://github.com/projectdiscovery/nuclei

https://github.com/projectdiscovery/subfinder

https://github.com/projectdiscovery/httpx

https://github.com/projectdiscovery/proxify

https://github.com/projectdiscovery/dnsx

decker

https://github.com/stevenaldinger/decker

Anubis

https://github.com/jonluca/Anubis

Usage Examples

Kali Prompt Quickstart

docker pull donaldrich/kali-linux:latest
docker run -it --rm --workdir="/root" --entrypoint="/bin/sh" --net="host" donaldrich/kali-linux:latest

Wifite Test Drive

docker pull donaldrich/kali-linux:wifi
docker run -it --rm --workdir="/root" --entrypoint="wifite" --net="host" donaldrich/kali-linux:wifi

• Putting the Raspberry Pi wlan0 card into monitoring mode has never been stable in my experience, even using the ISO. I use a 20$ USB dongle, never have any issues and better signal strength. If you procure one for such a purpose... MAKE SURE ITS CAPABLE OF MONITORING MODE

Docker Compose Kali SSH Server

services:
  kali-linux:
    image: donaldrich/kali-linux:<TAG>
    container_name: kali-linux
    hostname: kali-linux
    privileged: true  # not sure if this is required 
    volumes:
      - /some/path:/root  # optional, .ssh, user data, confits, etc.
    expose:
      - 2222
    network_mode: host  # required to access wireless card

SSH Access ( user: root / password: toor )

# external
ssh root@<HOST_IP> -p 2222
# from host
ssh root@127.0.0.1 -p 2222

Notes

• I am aware that running containers as root is not best practice. However, root is the intended user to run Kali, so I think the end justifies the means in this case.

• Its possible to harden the ssh server config by mounting a .ssh folder and /etc/ssh/sshd_config. Just make sure to chmod/chown if necessary, it won’t happen automatically. These settings will persist with the mount.

• SSH makes this image accesible to configuration management platforms (such as Ansible). I find it handy to maintain dotfiles, user configs, etc. in the container.

• The focus of this image is compatibility with Raspberry Pi. However, it is multi arch, and I’ve occasionally used the amd64 architecture without issues.