@@ -38,6 +38,8 @@ FROM debian:trixie-slim AS runtime-common
3838ARG DEBIAN_FRONTEND=noninteractive
3939ARG JOHN_BLEEDING_JUMBO_COMMIT=d8f5b0138e6f9fe24ab453f886dcaa2abb2e5407
4040ARG CREDSWEEPER_VERSION=1.15.1
41+ ARG HASHCAT_VERSION=7.1.2
42+ ARG LIGOLO_NG_VERSION=0.8.3
4143SHELL ["/bin/bash", "-euo", "pipefail", "-c"]
4244
4345ENV ADSCAN_HOME=/opt/adscan \
@@ -55,6 +57,7 @@ RUN apt-get update -y && apt-get install -y --no-install-recommends \
5557 bat \
5658 gosu \
5759 sudo \
60+ libcap2-bin \
5861 net-tools \
5962 iputils-ping \
6063 iproute2 \
@@ -96,10 +99,9 @@ RUN apt-get update -y && apt-get install -y --no-install-recommends \
9699 libssl3t64 \
97100 libldap2 \
98101 libldns-dev \
99- bind9-dnsutils \
100102 nmap \
101103 hydra \
102- hashcat \
104+ pocl-opencl-icd \
103105 samba \
104106 samba-common-bin \
105107 mono-devel \
@@ -121,6 +123,8 @@ RUN apt-get update -y && apt-get install -y --no-install-recommends \
121123 unbound \
122124 unbound-anchor \
123125 dns-root-data \
126+ && mkdir -p /etc/OpenCL/vendors \
127+ && printf '%s\n' 'libnvidia-opencl.so.1' > /etc/OpenCL/vendors/nvidia.icd \
124128 && rm -rf /var/lib/apt/lists/*
125129
126130# Codex CLI (official ChatGPT plan sign-in path for Plus/Pro subscriptions).
@@ -181,6 +185,13 @@ RUN set -eux; \
181185# External tools (git/curl)
182186RUN set -eux; \
183187 mkdir -p /opt/adscan/tools; \
188+ curl -fsSL "https://hashcat.net/files/hashcat-${HASHCAT_VERSION}.7z" -o /tmp/hashcat.7z; \
189+ 7z x /tmp/hashcat.7z -o/opt/adscan/tools >/dev/null; \
190+ test -x "/opt/adscan/tools/hashcat-${HASHCAT_VERSION}/hashcat.bin"; \
191+ ln -sf "/opt/adscan/tools/hashcat-${HASHCAT_VERSION}/hashcat.bin" /opt/adscan/bin/hashcat; \
192+ /opt/adscan/bin/hashcat --version | grep -F "v${HASHCAT_VERSION}"; \
193+ rm -f /tmp/hashcat.7z; \
194+ \
184195 git clone --depth 1 https://github.com/Greenwolf/ntlm_theft.git /opt/adscan/tools/ntlm_theft; \
185196 mkdir -p /opt/adscan/tools/firepwd; \
186197 curl -fsSL https://raw.githubusercontent.com/lclevy/firepwd/refs/heads/master/firepwd.py -o /opt/adscan/tools/firepwd/firepwd.py; \
@@ -206,6 +217,23 @@ RUN set -eux; \
206217 curl -fsSL https://github.com/ropnop/kerbrute/releases/download/v1.0.3/kerbrute_linux_amd64 -o /opt/adscan/tools/kerbrute/kerbrute; \
207218 chmod +x /opt/adscan/tools/kerbrute/kerbrute; \
208219 \
220+ mkdir -p /opt/adscan/tools/ligolo-ng/proxy/linux-amd64; \
221+ curl -fsSL \
222+ "https://github.com/nicocha30/ligolo-ng/releases/download/v${LIGOLO_NG_VERSION}/ligolo-ng_proxy_${LIGOLO_NG_VERSION}_linux_amd64.tar.gz" \
223+ -o /tmp/ligolo_proxy.tar.gz; \
224+ tar -xzf /tmp/ligolo_proxy.tar.gz -C /opt/adscan/tools/ligolo-ng/proxy/linux-amd64 proxy; \
225+ chmod +x /opt/adscan/tools/ligolo-ng/proxy/linux-amd64/proxy; \
226+ setcap cap_net_admin,cap_net_bind_service+ep /opt/adscan/tools/ligolo-ng/proxy/linux-amd64/proxy; \
227+ ln -sf /opt/adscan/tools/ligolo-ng/proxy/linux-amd64/proxy /opt/adscan/bin/ligolo-proxy; \
228+ rm -f /tmp/ligolo_proxy.tar.gz; \
229+ \
230+ mkdir -p /opt/adscan/tools/ligolo-ng/agent/windows-amd64; \
231+ curl -fsSL \
232+ "https://github.com/nicocha30/ligolo-ng/releases/download/v${LIGOLO_NG_VERSION}/ligolo-ng_agent_${LIGOLO_NG_VERSION}_windows_amd64.zip" \
233+ -o /tmp/ligolo_agent_windows_amd64.zip; \
234+ unzip -q /tmp/ligolo_agent_windows_amd64.zip agent.exe -d /opt/adscan/tools/ligolo-ng/agent/windows-amd64; \
235+ rm -f /tmp/ligolo_agent_windows_amd64.zip; \
236+ \
209237 git clone --depth 1 https://github.com/lgandx/Responder.git /opt/adscan/tools/responder; \
210238 python3 -m venv /opt/adscan/tool_venvs/responder/venv; \
211239 /opt/adscan/tool_venvs/responder/venv/bin/python -m pip install --no-cache-dir -U pip; \
0 commit comments