diff --git a/docker-compose.yml b/docker-compose.yml index 8f031cf..25d6535 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,10 +1,13 @@ version: '3.8' services: examples_bindshell_target: - image: ubuntu:20.04 + build: + context: examples/secure-image + dockerfile: Dockerfile volumes: - ./target:/backdoor command: /backdoor/release/ex-bind-shell-backdoor + privileged: true examples_bindshell_client: image: alpine diff --git a/examples/secure-image/Dockerfile b/examples/secure-image/Dockerfile new file mode 100644 index 0000000..eb873cd --- /dev/null +++ b/examples/secure-image/Dockerfile @@ -0,0 +1,22 @@ +# Copyright (C) 2023 Andrew Rioux +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as +# published by the Free Software Foundation, either version 3 of the +# License, or (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with this program. If not, see . + +FROM ubuntu:20.04 + +COPY ./setup.sh /container-init.sh + +RUN apt update && apt install -y iptables && chmod +x /container-init.sh + +ENTRYPOINT ["/container-init.sh"] \ No newline at end of file diff --git a/examples/secure-image/setup.sh b/examples/secure-image/setup.sh new file mode 100755 index 0000000..273b2de --- /dev/null +++ b/examples/secure-image/setup.sh @@ -0,0 +1,20 @@ +#!/bin/sh +# Copyright (C) 2023 Andrew Rioux +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU Affero General Public License as +# published by the Free Software Foundation, either version 3 of the +# License, or (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU Affero General Public License for more details. +# +# You should have received a copy of the GNU Affero General Public License +# along with this program. If not, see . + +iptables -P INPUT DROP +iptables -P OUTPUT DROP + +exec "$@" \ No newline at end of file