easy command tool for vulhub
Project description
vulhub-compose
vulhub-cli
is a command line tool of the vulhub project, which makes the operation of docker-compose
transparent and reduces the difficulty of using the vulhub shooting range. Vulhub-cli supports local mode and remote mode. The remote mode can directly start the related shooting range without downloading the complete vulhub project, which is more convenient to use.
Quick start
If you want to download the vulhub project or have already downloaded the vulhub project, you can directly use the local mode; if you don’t want to download, you can use the remote mode
local mode
# Specify relative path
$ vulhub-cli local start --app fastjson/1.2.24-rce
$ vulhub-cli local start --app ./fastjson/1.2.24-rce
# Specify absolute path
$ vulhub-cli local start --app /opt/vulhub/fastjson/1.2.24-rce
# Stop environment use vulhub-cli
$ vulhub-cli local stop --app fastjson/1.2.24-rce
# Stop environment with agent use vulhub-cli
$ vulhub-cli local stop --app fastjson/1.2.24-rce
remote mode
# Specify vulhub app's name, eg: fastjson/1.2.24-rce
$ vulhub-cli remote start --app fastjson/1.2.24-rce
# Stop environment with agent use vulhub-cli
$ vulhub-cli remote stop --app fastjson/1.2.24-rce
Plugin System
vulhub-cli
provides plug-in functions, which can support custom plug-ins to achieve specific functions.
Plugin: lingzhi
Lingzhi IAST is an interactive application security testing tool independently developed by FireWire platform to detect vulnerabilities in application systems; lingzhi IAST supports the detection of some 0 Day vulnerabilities. Now, you can use the vulhub-cli tool to quickly create a shooting range and install lingzhi IAST to experience the vulnerability detection function.
Usage
The startup method is the same as the normal startup method, just add the plugin
parameter to specify the use of the lingzhi
plugin.
# Start the vulhub's app with Lingzhi IAST
$ vulhub-cli remote start --app fastjson/1.2.24-rce --plugin lingzhi
# Stop the vulhub's app with Lingzhi IAST
$ vulhub-cli remote stop --app fastjson/1.2.24-rce --plugin lingzhi
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for vulhub_cli-0.0.4-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 148e45ab1276c4baad858998d527157e032c89c0c9055e6ea3673ee12ed559ff |
|
MD5 | 388556f36484afa796debb1e4ed66303 |
|
BLAKE2b-256 | 91773be4dbc41ce8544fcfe18ad75aa34eeec472a8fb2fe211fc85602a292346 |