Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add Dockerfile #7

Closed
wants to merge 206 commits into from
Closed

add Dockerfile #7

wants to merge 206 commits into from

Conversation

disenchant
Copy link

Adding a Dockerfile that results in a minimalist container image.

Build

$ docker build -t root4loot/rescope .
...
$ docker images root4loot/rescope
REPOSITORY          TAG       IMAGE ID       CREATED         SIZE
root4loot/rescope   latest    a93de8a1ea5b   5 minutes ago   6.72MB

Run

$ docker run --rm -it -v $PWD/output:/data root4loot/rescope --zap --name CoolScope -u hackerone.com/security -o zapscope.context
[-] Grabbing targets from hackerone.com/security
 +  https://hackerone.com
 +  https://api.hackerone.com
 +  https://hackerone-us-west-2-production-attachments.s3-us-west-2.amazonaws.com/
 +  *.vpn.hackerone.net
 +  https://www.hackerone.com
 +  https://errors.hackerone.net
 +  https://*.hackerone-ext-content.com
 +  https://*.hackerone-user-content.com/
 +  https://ctf.hacker101.com
 -  https://support.hackerone.com
 -  https://go.hacker.one
 -  https://www.hackeronestatus.com/
 -  https://info.hacker.one/
 -  https://ma.hacker.one
[-] Parsing to XML (OWASP ZAP)
[✓] Done. Wrote 2488 bytes to zapscope.context

Result / Output

$ ls -l $PWD/output
total 8
-rw-r--r--  1 user  staff  2292 Jan 25 20:13 zapscope.context

root4loot and others added 30 commits March 6, 2019 22:22
docs rephrase
Burp/ZAP are now specified using flag arguments which is more intuitive and convenient.

Resolved an issue that resulted in IP ranges/CIDR not being properly escaped.
rescope will now handle !EXCLUDE tag having leading/preceding text on the same line.

rescope will now include a leading +/- for each target to better indicate includes/excludes. Perhaps that'll make things clearer for those who are color blind.
Resolved a filepath issue that resulted in panic upon parsing to ZAP from executable that resided outside of package directory.

Resolved missing parsing of IP-range/CIDR that that led to unescaped
regex.
v0.2
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants