Page | 34
www.hackingarticles.in
John the Ripper
Without
a password cracking tool, the penetration testing framework would not
be considered an
ideal
pentest system, so by executing the following command I pull the Johntheripper docker file.
Now, if you have a
hash file in your machine, then run the following to make use of
the docker image
for john ripper to crack the password from inside the hash file.
docker pull obscuritylabs/johntheripper
docker run --rm -it -v ${PWD}:/root
obscuritylabs/johntheripper --format=NT
/root/hash
Page | 35
www.hackingarticles.in
Metasploit
Metasploit is the most relevant and delegated tool for penetration testing. The manual installations
of Metasploit often pose problems for a pentester. Run the following command to drag the Metasploit
docker image to your local machine.
To
run the Metasploit docker file, execute the command given and proceed
using the console in
Metasploit.
docker pull metasploitframework/metasploit-framework
docker run --rm -it -p 443:443 -v
${PWD}:/root/.msf4 metasploitframework/metasploi