logo
ghcr.io/usestrix/strix-sandbox:1.1.0
linux/amd64 ghcr.io

Strix Sandbox镜像是Strix项目提供的安全沙箱环境,用于隔离执行代码或进行安全测试,确保执行过程中的安全性和稳定性,为相关应用场景提供可靠的隔离运行能力。

15
浏览次数
3.81GB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0
源镜像
ghcr.io/usestrix/strix-sandbox:1.1.0
镜像ID
sha256:17990dfe53591f4e2cad84bd993a96868417425b8ef08a7d38df5ec5bf0bcf58
镜像 TAG
1.1.0
镜像大小
3.81GB
平台架构
linux/amd64
镜像源
ghcr.io
CMD
启动入口
docker-entrypoint.sh
工作目录
/workspace
OS/平台
linux/amd64
镜像创建
2026-07-22T17:07:58.888021132Z
同步时间
2026-07-24 11:56
浏览量
15 次
贡献者
⚙️ 环境变量 11
KeyValue
PATH=/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
LANG=C.UTF-8 1
NPM_CONFIG_PREFIX=/home/pentester/.npm-global 2
AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/chromium 3
AGENT_BROWSER_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 4
AGENT_BROWSER_ARGS=--disable-blink-features=AutomationControlled,--no-first-run,--no-default-browser-check,--lang=en-US 5
AGENT_BROWSER_SCREENSHOT_DIR=/workspace/.agent-browser-screenshots 6
VIRTUAL_ENV=/app/.venv 7
REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt 8
SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt 9
PYTHONPATH=/opt/strix-python 10
🏷️ 镜像标签 11
KeyValue
AI Agent Penetration Testing Environment with Comprehensive Automated Tools description
1.43.2 io.buildah.version
Kali Developers <devel@kali.org> org.opencontainers.image.authors
2026-07-19T04:04:55Z org.opencontainers.image.created
Official Kali Linux container image for kali-rolling org.opencontainers.image.description
4d1ddb93 org.opencontainers.image.revision
https://gitlab.com/kalilinux/build-scripts/kali-docker org.opencontainers.image.source
Kali Linux (kali-rolling branch) org.opencontainers.image.title
https://www.kali.org/ org.opencontainers.image.url
OffSec org.opencontainers.image.vendor
2026.07.19 org.opencontainers.image.version
🛡️ 镜像安全扫描
debian kali-rolling Trivy 2026-07-24 11:57 查看完整报告
4
低危 LOW
74
中危 MEDIUM
105
高危 HIGH
1
严重 CRITICAL
受影响目标 (58)
ghcr.io/usestrix/strix-sandbox:1.1.0 (debian kali-rolling) debian Node.js node-pkg Python python-pkg home/pentester/.tree-sitter/parsers/tree-sitter-bash/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-go/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-java/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-javascript/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-json/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-python/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-typescript/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-yaml/Cargo.lock cargo home/pentester/go/bin/gospider gobinary home/pentester/go/bin/httpx gobinary home/pentester/go/bin/interactsh-client gobinary home/pentester/go/bin/katana gobinary home/pentester/go/bin/vulnx gobinary usr/local/bin/gitleaks gobinary usr/local/bin/trivy gobinary usr/local/bin/uv rustbinary usr/local/bin/uvx rustbinary /app/certs/ca.key /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_proxy /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_proxy /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_platform /home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-37580.yaml /home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-44910.yaml /home/pentester/.local/nuclei-templates/http/cves/2022/CVE-2022-32430.yaml /home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-22463.yaml /home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-5074.yaml /home/pentester/.local/nuclei-templates/http/cves/2024/CVE-2024-43441.yaml /home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49001.yaml /home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49002.yaml /home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-69971.yaml /home/pentester/.local/nuclei-templates/http/global-matchers/secrets-patterns-rules.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/genieacs-default-jwt.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/nacos-authentication-bypass.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/nacos/nacos-create-user.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/symfony/symfony-default-key-rce.yaml /home/pentester/tools/jwt_tool/jwt_tool.py

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0  ghcr.io/usestrix/strix-sandbox:1.1.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0  ghcr.io/usestrix/strix-sandbox:1.1.0

Shell快速替换命令

sed -i 's#ghcr.io/usestrix/strix-sandbox:1.1.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0  ghcr.io/usestrix/strix-sandbox:1.1.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0  ghcr.io/usestrix/strix-sandbox:1.1.0'

镜像构建历史


# 2026-07-23 01:07:58  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["docker-entrypoint.sh"]
                        
# 2026-07-23 01:07:58  0.00B 设置工作目录为/workspace
WORKDIR /workspace
                        
# 2026-07-23 01:07:58  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-07-23 01:07:58  3.81KB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c chmod +x /usr/local/bin/docker-entrypoint.sh # buildkit
                        
# 2026-07-23 01:07:58  3.81KB 复制新文件或目录到容器中
COPY containers/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit
                        
# 2026-07-23 01:07:58  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-07-23 01:07:58  6.59KB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c echo 'export PATH="/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:$PATH"' >> /home/pentester/.bashrc &&     echo 'export PATH="/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:$PATH"' >> /home/pentester/.profile # buildkit
                        
# 2026-07-23 01:07:58  0.00B 设置环境变量 PYTHONPATH
ENV PYTHONPATH=/opt/strix-python
                        
# 2026-07-23 01:07:58  24.24KB 复制新文件或目录到容器中
COPY --chown=pentester:pentester strix/tools/proxy/caido_api.py /opt/strix-python/caido_api.py # buildkit
                        
# 2026-07-23 01:07:58  80.73MB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c python3 -m venv /app/.venv &&     /app/.venv/bin/pip install --no-cache-dir caido-sdk-client &&     /app/.venv/bin/pip install --no-cache-dir         requests httpx beautifulsoup4 lxml pyjwt cryptography &&     /app/.venv/bin/pip install --no-cache-dir -r /home/pentester/tools/jwt_tool/requirements.txt &&     printf '%s\n'         '#!/bin/bash'         'exec /app/.venv/bin/python /home/pentester/tools/jwt_tool/jwt_tool.py "$@"'         > /home/pentester/.local/bin/jwt_tool &&     chmod +x /home/pentester/.local/bin/jwt_tool # buildkit
                        
# 2026-07-23 01:07:47  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-07-23 01:07:47  0.00B 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c mkdir -p /workspace && chown -R pentester:pentester /workspace /app # buildkit
                        
# 2026-07-23 01:07:47  0.00B 设置环境变量 SSL_CERT_FILE
ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
                        
# 2026-07-23 01:07:47  0.00B 设置环境变量 REQUESTS_CA_BUNDLE
ENV REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
                        
# 2026-07-23 01:07:47  188.37MB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c ARCH=$(uname -m) &&     if [ "$ARCH" = "x86_64" ]; then         CAIDO_ARCH="x86_64";     elif [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then         CAIDO_ARCH="aarch64";     else         echo "Unsupported architecture: $ARCH" && exit 1;     fi &&     wget -O caido-cli.tar.gz "https://caido.download/releases/v${CAIDO_VERSION}/caido-cli-v${CAIDO_VERSION}-linux-${CAIDO_ARCH}.tar.gz" &&     tar -xzf caido-cli.tar.gz &&     chmod +x caido-cli &&     rm caido-cli.tar.gz &&     mv caido-cli /usr/local/bin/ # buildkit
                        
# 2026-07-23 01:07:44  0.00B 定义构建参数
ARG CAIDO_VERSION=0.56.0
                        
# 2026-07-23 01:07:44  0.00B 设置工作目录为/app
WORKDIR /app
                        
# 2026-07-23 01:07:44  0.00B 设置环境变量 VIRTUAL_ENV
ENV VIRTUAL_ENV=/app/.venv
                        
# 2026-07-23 01:07:44  0.00B 设置环境变量 PATH
ENV PATH=/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-07-23 01:07:44  0.00B 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c apt-get autoremove -y &&     apt-get autoclean &&     rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* &&     find /usr/share/locale -mindepth 1 -maxdepth 1 -type d         ! -name 'en' ! -name 'en_US' ! -name 'C' -exec rm -rf {} + &&     rm -rf /usr/share/doc/* /usr/share/doc-base/* /usr/share/man/* # buildkit
                        
# 2026-07-23 01:07:42  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-07-23 01:07:42  9.62MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c npm install -g jshint # buildkit
                        
# 2026-07-23 01:07:41  336.36MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c pipx install semgrep &&     pipx install bandit # buildkit
                        
# 2026-07-23 01:07:37  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-07-23 01:07:37  189.88MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c apt-get install -y wapiti # buildkit
                        
# 2026-07-23 01:07:21  168.43MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin # buildkit
                        
# 2026-07-23 01:07:19  21.99MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c set -eux;     ARCH="$(uname -m)";     case "$ARCH" in         x86_64) GITLEAKS_ARCH="x64" ;;         aarch64|arm64) GITLEAKS_ARCH="arm64" ;;         *) echo "Unsupported architecture: $ARCH" >&2; exit 1 ;;     esac;     TAG="$(curl -fsSL https://api.github.com/repos/gitleaks/gitleaks/releases/latest | jq -r .tag_name)";     curl -fsSL "https://github.com/gitleaks/gitleaks/releases/download/${TAG}/gitleaks_${TAG#v}_linux_${GITLEAKS_ARCH}.tar.gz" -o /tmp/gitleaks.tgz;     tar -xzf /tmp/gitleaks.tgz -C /tmp;     install -m 0755 /tmp/gitleaks /usr/local/bin/gitleaks;     rm -f /tmp/gitleaks /tmp/gitleaks.tgz # buildkit
                        
# 2026-07-23 01:07:18  34.77MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /home/pentester/.local/bin "v${TRUFFLEHOG_VERSION}" &&     chown -R pentester:pentester /home/pentester/.local # buildkit
                        
# 2026-07-23 01:07:10  0.00B 定义构建参数
ARG TRUFFLEHOG_VERSION=3.95.9
                        
# 2026-07-23 01:07:10  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-07-23 01:07:10  440.11KB 执行命令并创建新的镜像层
RUN /bin/sh -c git clone https://github.com/aravind0x7/JS-Snooper.git &&     chmod +x JS-Snooper/js_snooper.sh &&     git clone https://github.com/xchopath/jsniper.sh.git &&     chmod +x jsniper.sh/jsniper.sh &&     git clone https://github.com/ticarpi/jwt_tool.git &&     chmod +x jwt_tool/jwt_tool.py # buildkit
                        
# 2026-07-23 01:07:08  0.00B 设置工作目录为/home/pentester/tools
WORKDIR /home/pentester/tools
                        
# 2026-07-23 01:07:08  47.81MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     TS_PARSER_DIR="/home/pentester/.tree-sitter/parsers";     mkdir -p "${TS_PARSER_DIR}";     for repo in tree-sitter-java tree-sitter-javascript tree-sitter-python tree-sitter-go tree-sitter-bash tree-sitter-json tree-sitter-yaml tree-sitter-typescript; do         if [ "$repo" = "tree-sitter-yaml" ]; then             repo_url="https://github.com/tree-sitter-grammars/${repo}.git";         else             repo_url="https://github.com/tree-sitter/${repo}.git";         fi;         if [ ! -d "${TS_PARSER_DIR}/${repo}" ]; then             git clone --depth 1 "${repo_url}" "${TS_PARSER_DIR}/${repo}";         fi;     done;     if [ -d "${TS_PARSER_DIR}/tree-sitter-typescript/typescript" ]; then         ln -sfn "${TS_PARSER_DIR}/tree-sitter-typescript/typescript" "${TS_PARSER_DIR}/tree-sitter-typescript-typescript";     fi;     if [ -d "${TS_PARSER_DIR}/tree-sitter-typescript/tsx" ]; then         ln -sfn "${TS_PARSER_DIR}/tree-sitter-typescript/tsx" "${TS_PARSER_DIR}/tree-sitter-typescript-tsx";     fi;     tree-sitter init-config >/dev/null 2>&1 || true;     TS_CONFIG="/home/pentester/.config/tree-sitter/config.json";     mkdir -p "$(dirname "${TS_CONFIG}")";     [ -f "${TS_CONFIG}" ] || printf '{}\n' > "${TS_CONFIG}";     TMP_CFG="$(mktemp)";     jq --arg p "${TS_PARSER_DIR}" '.["parser-directories"] = ((.["parser-directories"] // []) + [$p] | unique)' "${TS_CONFIG}" > "${TMP_CFG}";     mv "${TMP_CFG}" "${TS_CONFIG}" # buildkit
                        
# 2026-07-23 01:07:03  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c /home/pentester/.npm-global/bin/agent-browser doctor --offline --quick # buildkit
                        
# 2026-07-23 01:07:03  0.00B 设置环境变量 AGENT_BROWSER_SCREENSHOT_DIR
ENV AGENT_BROWSER_SCREENSHOT_DIR=/workspace/.agent-browser-screenshots
                        
# 2026-07-23 01:07:03  0.00B 设置环境变量 AGENT_BROWSER_ARGS
ENV AGENT_BROWSER_ARGS=--disable-blink-features=AutomationControlled,--no-first-run,--no-default-browser-check,--lang=en-US
                        
# 2026-07-23 01:07:03  0.00B 设置环境变量 AGENT_BROWSER_USER_AGENT
ENV AGENT_BROWSER_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
                        
# 2026-07-23 01:07:03  0.00B 设置环境变量 AGENT_BROWSER_EXECUTABLE_PATH
ENV AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/chromium
                        
# 2026-07-23 01:07:03  232.97MB 执行命令并创建新的镜像层
RUN /bin/sh -c npm install -g retire@latest &&     npm install -g eslint@latest &&     npm install -g js-beautify@latest &&     npm install -g @ast-grep/cli@latest &&     npm install -g tree-sitter-cli@latest &&     npm install -g agent-browser@0.26.0 &&     npm cache clean --force &&     ln -sf ast-grep /home/pentester/.npm-global/lib/node_modules/@ast-grep/cli/sg # buildkit
                        
# 2026-07-23 01:06:57  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c mkdir -p /home/pentester/.npm-global # buildkit
                        
# 2026-07-23 01:06:57  0.00B 设置环境变量 NPM_CONFIG_PREFIX
ENV NPM_CONFIG_PREFIX=/home/pentester/.npm-global
                        
# 2026-07-23 01:06:57  34.50MB 执行命令并创建新的镜像层
RUN /bin/sh -c pipx install arjun &&     pipx install dirsearch &&     pipx inject dirsearch 'setuptools<81' &&     pipx install wafw00f # buildkit
                        
# 2026-07-23 01:06:54  47.21MB 执行命令并创建新的镜像层
RUN /bin/sh -c nuclei -update-templates # buildkit
                        
# 2026-07-23 01:06:47  250.48MB 复制新文件或目录到容器中
COPY --chown=pentester:pentester /out/bin/ /home/pentester/go/bin/ # buildkit
                        
# 2026-07-23 01:06:46  0.00B 设置工作目录为/tmp
WORKDIR /tmp
                        
# 2026-07-23 01:06:46  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-07-23 01:06:46  66.05MB 执行命令并创建新的镜像层
RUN /bin/sh -c curl -LsSf https://astral.sh/uv/install.sh | env UV_INSTALL_DIR=/usr/local/bin sh # buildkit
                        
# 2026-07-23 01:06:46  183.70KB 执行命令并创建新的镜像层
RUN /bin/sh -c cp /app/certs/ca.crt /usr/local/share/ca-certificates/ca.crt &&     update-ca-certificates # buildkit
                        
# 2026-07-23 01:06:45  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-07-23 01:06:45  2.27KB 执行命令并创建新的镜像层
RUN /bin/sh -c openssl ecparam -name prime256v1 -genkey -noout -out /app/certs/ca.key &&     openssl req -x509 -new -key /app/certs/ca.key     -out /app/certs/ca.crt     -days 3650     -subj "/C=US/ST=CA/O=Security Testing/CN=Testing Root CA"     -addext "basicConstraints=critical,CA:TRUE"     -addext "keyUsage=critical,digitalSignature,keyEncipherment,keyCertSign" &&     openssl pkcs12 -export     -out /app/certs/ca.p12     -inkey /app/certs/ca.key     -in /app/certs/ca.crt     -passout pass:""     -name "Testing Root CA" &&     chmod 644 /app/certs/ca.crt &&     chmod 600 /app/certs/ca.key &&     chmod 600 /app/certs/ca.p12 # buildkit
                        
# 2026-07-23 01:06:45  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-07-23 01:06:45  165.00B 执行命令并创建新的镜像层
RUN /bin/sh -c setcap cap_net_raw,cap_net_admin,cap_net_bind_service+eip $(which nmap) # buildkit
                        
# 2026-07-23 01:06:45  1.91GB 执行命令并创建新的镜像层
RUN /bin/sh -c apt-get update &&     apt-get install -y --no-install-recommends     wget curl git vim nano unzip tar     apt-transport-https ca-certificates gnupg lsb-release     software-properties-common     gcc libc6-dev     python3 python3-pip python3-venv python3-setuptools     net-tools dnsutils whois     file xxd     jq parallel ripgrep grep     less procps htop     iproute2 iputils-ping netcat-traditional     nmap ncat ndiff     sqlmap nuclei subfinder naabu ffuf     nodejs npm pipx     libcap2-bin     gdb     libnss3-tools     chromium fonts-liberation # buildkit
                        
# 2026-07-23 01:05:25  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c mkdir -p /home/pentester/tools /app/certs &&     chown -R pentester:pentester /app/certs /home/pentester/tools # buildkit
                        
# 2026-07-23 01:05:25  35.71KB 执行命令并创建新的镜像层
RUN /bin/sh -c useradd -m -s /bin/bash pentester &&     usermod -aG sudo pentester &&     echo "pentester ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers &&     touch /home/pentester/.hushlogin # buildkit
                        
# 2026-07-23 01:05:25  70.32MB 执行命令并创建新的镜像层
RUN /bin/sh -c apt-get update &&     apt-get install -y kali-archive-keyring sudo &&     apt-get update &&     apt-get upgrade -y # buildkit
                        
# 2026-07-23 01:05:25  0.00B 添加元数据标签
LABEL description=AI Agent Penetration Testing Environment with Comprehensive Automated Tools
                        
# 2026-07-19 12:06:09  119.63MB 
/bin/sh -c #(nop) CMD ["bash"]
                        
# 2026-07-19 12:06:08  0.00B 
/bin/sh -c #(nop) ENV LANG=C.UTF-8
                        
# 2026-07-19 12:06:08  0.00B 
/bin/sh -c #(nop) ADD file:4e6f6219cdadee6b097601a7b4a2db43f9a1fc04b347cfc82c39a0c25e28e71b in /      
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) LABEL org.opencontainers.image.created="$BUILD_DATE"       org.opencontainers.image.source="$PROJECT_URL"       org.opencontainers.image.revision="$VCS_REF"       org.opencontainers.image.vendor="OffSec"       org.opencontainers.image.version="$VERSION"       org.opencontainers.image.title="Kali Linux ($RELEASE_DESCRIPTION branch)"       org.opencontainers.image.description="Official Kali Linux container image for $RELEASE_DESCRIPTION"       org.opencontainers.image.url="https://www.kali.org/"       org.opencontainers.image.authors="Kali Developers <devel@kali.org>"
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL RELEASE_DESCRIPTION TARBALL VCS_REF VERSION
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL TARBALL VCS_REF VERSION
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL VCS_REF VERSION
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL VERSION
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE VERSION
                        
# 2026-07-19 12:06:02  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE
                        
                    

镜像信息

{
    "Id": "sha256:17990dfe53591f4e2cad84bd993a96868417425b8ef08a7d38df5ec5bf0bcf58",
    "RepoTags": [
        "ghcr.io/usestrix/strix-sandbox:1.1.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.1.0"
    ],
    "RepoDigests": [
        "ghcr.io/usestrix/strix-sandbox@sha256:812c42ca0332a25e7a8d87c091a33b5fee722e5b13b370dda29a33e4e26968b6",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox@sha256:1f5d0408fde5ab03bfaa24eecc285b86264884487c27d39f89e87623315172ed"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-07-22T17:07:58.888021132Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "pentester",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "LANG=C.UTF-8",
            "NPM_CONFIG_PREFIX=/home/pentester/.npm-global",
            "AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/chromium",
            "AGENT_BROWSER_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36",
            "AGENT_BROWSER_ARGS=--disable-blink-features=AutomationControlled,--no-first-run,--no-default-browser-check,--lang=en-US",
            "AGENT_BROWSER_SCREENSHOT_DIR=/workspace/.agent-browser-screenshots",
            "VIRTUAL_ENV=/app/.venv",
            "REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt",
            "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt",
            "PYTHONPATH=/opt/strix-python"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/workspace",
        "Entrypoint": [
            "docker-entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "description": "AI Agent Penetration Testing Environment with Comprehensive Automated Tools",
            "io.buildah.version": "1.43.2",
            "org.opencontainers.image.authors": "Kali Developers \u003cdevel@kali.org\u003e",
            "org.opencontainers.image.created": "2026-07-19T04:04:55Z",
            "org.opencontainers.image.description": "Official Kali Linux container image for kali-rolling",
            "org.opencontainers.image.revision": "4d1ddb93",
            "org.opencontainers.image.source": "https://gitlab.com/kalilinux/build-scripts/kali-docker",
            "org.opencontainers.image.title": "Kali Linux (kali-rolling branch)",
            "org.opencontainers.image.url": "https://www.kali.org/",
            "org.opencontainers.image.vendor": "OffSec",
            "org.opencontainers.image.version": "2026.07.19"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 3813584196,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/ea64c148d95486c8001653882d5139a6d5923119e59cf3ceb14a195f90c4d47c/diff:/var/lib/docker/overlay2/c201be96db6a5ccbda70ad54b9934ef04fb0a69e1e99d16d75c424d9f88ba692/diff:/var/lib/docker/overlay2/3e10a148fc2dfa34c98933075bc2ef8c063709c19c142309af890cefa2a2c560/diff:/var/lib/docker/overlay2/35187e4f6a10b7a89db5f80132beb6912678441e9826cc8afd29798ab37ccc1d/diff:/var/lib/docker/overlay2/c99c8b1ea64e4752281178d0d0ad00ed395d0a24923cd3c7ad3db598d01e71f3/diff:/var/lib/docker/overlay2/1e2d49cd57b34132f5db7ca7fd2b11b0ceff3370ea02d6cacfa09ba94bef9e4d/diff:/var/lib/docker/overlay2/1b63fa559f6e15e7949483f5c3864aa52805c2d6478df0f6e064a8cfe048b030/diff:/var/lib/docker/overlay2/d9c2ea4363c81b961ef4f9546ddc68a38221595393baed95fe459056f3e8117a/diff:/var/lib/docker/overlay2/4f6d5e4064424c044901dcb17263d5e495e9ee4e0d6edc334085e86ab5527b8b/diff:/var/lib/docker/overlay2/a7d042d390ab8c6fbc863999b2ca44fd4b6ca0ff30f65dba420a75f6f721738b/diff:/var/lib/docker/overlay2/e0e9bd06bb91dac5b78eb7738aeddc9a7e8d1bce51cb559f31b016d20fa738fb/diff:/var/lib/docker/overlay2/f8bcbe0dda8f052561cfecd770f731b303a50b46a43702d763c3f1772db33ec3/diff:/var/lib/docker/overlay2/fc9d0bd9727ea807acfc3a00c701d1a3a31c8b4e721606e7a57d9ccb38b5414a/diff:/var/lib/docker/overlay2/840479984f38a71f387f6602d410b362e2a16117d81fc136023bb5bd0315f5b3/diff:/var/lib/docker/overlay2/28caffa3356a70b99e0e03629737a0744146b55b5ca50b7ff8ec2b6ae336202a/diff:/var/lib/docker/overlay2/57d3e11fefbb5e1c0e072e00a6ec30194beb1264407c15cc22e16f947e99263f/diff:/var/lib/docker/overlay2/64518109da2f151bb624d8060f85cedf5965035bb3533dde04d02e707033d7b6/diff:/var/lib/docker/overlay2/eb030470e070509a83f03f14d194f3c09b312c77f28b5e458d39bc76b1fce16c/diff:/var/lib/docker/overlay2/0e7ffa321adad951206ea174f6a88a8465ca7dbe2ece4227560d8f39af3f4149/diff:/var/lib/docker/overlay2/92f95c44eaaf4e59d87ba7a3ef438f43879042b1ab380fa7504cda4419e4cdab/diff:/var/lib/docker/overlay2/a6b0ef568b21f69c3edaf34c5e78e19cc1bf5999467623846ef1ce673301ea71/diff:/var/lib/docker/overlay2/bf63b21edb18ed744b8fe71b8413ccfead639296b9464db4c290f6e5e8a68e3a/diff:/var/lib/docker/overlay2/f4ca7315d964094de8eedb53dc78f9dc2742186228a993b6f2ed24bd2feb92a1/diff:/var/lib/docker/overlay2/30966796bfffec006b15fd444c102d513d3c050fcecb95a18a1fbc8dde8f77de/diff:/var/lib/docker/overlay2/dbd2814a6b4126e6bed4426bd9afe745f61a679a005b69ecd869737bb8873044/diff:/var/lib/docker/overlay2/43ae87510dbc0fa1ff860de48e1142bc856099a0eb4a70bcd68e5b33a7a48e8d/diff:/var/lib/docker/overlay2/51b0957f3c347c578ab12ff086f26ec24971f872c9c385aade8e083e4c84737e/diff:/var/lib/docker/overlay2/baf199707c075dcd96362404bfce1d8fd48c32c44148537ba62584456cbb0c31/diff:/var/lib/docker/overlay2/bb4e87c4a99fad85d479f4397f42ff5a641c5aa58070fec8af044b38ebd30ab2/diff:/var/lib/docker/overlay2/58148b5b6f0198e38a55c55d97003e96b9f45fb79f3d737a801fc5f6dafd7fac/diff:/var/lib/docker/overlay2/b62d4362db8f238cee3ff3494aaeddbcfd0b5d9c056f0f0d72202d54e42b2e37/diff:/var/lib/docker/overlay2/d32113603876e490b34cf275347ff80398899020cab156d980a0718dd77add51/diff:/var/lib/docker/overlay2/90ca10a414f1f460039c5e83480b44960a4e6d06e98568d72b708a62aa69f41d/diff:/var/lib/docker/overlay2/02d8095d332af71bdb1ecc5e1725637356573e385bb5872b959cbe76c9ba4e07/diff",
            "MergedDir": "/var/lib/docker/overlay2/a39d5b0f54d75b082300c47569d83bc7e156a5fc70410bc1332745eba0aac876/merged",
            "UpperDir": "/var/lib/docker/overlay2/a39d5b0f54d75b082300c47569d83bc7e156a5fc70410bc1332745eba0aac876/diff",
            "WorkDir": "/var/lib/docker/overlay2/a39d5b0f54d75b082300c47569d83bc7e156a5fc70410bc1332745eba0aac876/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:db1b649599f461277c1f9ca5e5992d6a9054713e14a3277d058e9604607dbb9f",
            "sha256:9e2d3416a3cc1feed4a012b9fdce1619c44179fd28aaf475464aa4cc0bebf4aa",
            "sha256:ca56333540628aa012d1bf8ebcc4a9f8358481ac7d5549869da05a7d306e637a",
            "sha256:8340d33de6e29a061e4e3e20d112bcb5ca82beb4a8ef4f52238be78c8f3e263d",
            "sha256:a32f6ff59eda800538a920f0734e0688afa0f0716ca28d1835a0f8e4628b452a",
            "sha256:c0fc81f81b3e8e2b8482bc728c437c05ea1937ae72ec4bc6a8f7324c00b79728",
            "sha256:e5a18afa9f1aeedbae85cd3d19e2f6ba1ee3ef49ea5c17880a48e19a17e14c96",
            "sha256:5d7a9709e7966cd04d6527d59dc9ecbc0626447e9fc9bc340b0e5500ee7a1cec",
            "sha256:b5ecd760a10ebdd5c661c651b623e30c8bacb152a8ee77b51f8a3aed95ec46c0",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:9f43aeac7f530b2c491aeec43f3b69998d058be6675a2b8a565b0eb84d49c066",
            "sha256:779c29af4a0fc98eed31c371f66fa2670e0e25de1b268a56184ae0058213d34c",
            "sha256:0539f75101a0d7cebe24e376cfc4d4d05a04abb2f7ee791b589361fdf57b15e3",
            "sha256:539bb77880caf499d9b139ec71587d78c5d862990049c0dc874778df0ab707d2",
            "sha256:2e767c633e333096ec6f5e40470f1d375005b0872014c1e88ac5d6811c1bc5d5",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:95b0cdde08f954ae1171ffdffd9892c43663d73a94c70e49d66295ded413eb27",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:734763545180e5123002fcc5572bd07786e2afcf3bb02307f1add40b45bc1960",
            "sha256:086cc923312f22bd6e6312f481aafa0ed153e62329680b6c9051190ce19dac79",
            "sha256:60629923bae595c5fe5490940248c3c1c93503399e69ef2bed317cbdd2478d85",
            "sha256:ea804cb5dfbf393d951fda3450433773708dadfa3c63ca2315c78f37b0a0f1e2",
            "sha256:0037f41b7cd757de0f2687ed71b76796fc152f843446de8dfb73e30fa1643d84",
            "sha256:01f657a3f4170bcf2f62b02d48337191762b0bcd641584ed4b6fec54bb22b102",
            "sha256:b960a7c92c7e54178cf0e4d96f341080cf252d855393a08d1055918808984d17",
            "sha256:c6d9e0f5f11a49fabbf0243d6ca2c62bb9a3b6ae80e7ff852652e4d1a6d0aaea",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:3d134a83e4c38a474cb1b2fbc1bcb123dcad7c56531d0540a638a9d617130457",
            "sha256:5c69be361e057e8462c3a226970edf20072eff56f7734611cd352975c792003d",
            "sha256:54762329c2ffa82a7c84feb8a70d26f3bd331e1d5c94acb98ebeab66c3221620",
            "sha256:e8a1606812047ae7efc849e6e191912e8c54e5fbdf6bfdb74d21e675f6a5f7df",
            "sha256:55ea2a9fa8f19cd0379f891a389402e76c473e289106442a755319d19cbc216a",
            "sha256:a0dd1ad7798bc6f433dfa8a6efa128d0f040910334db272a718b140abae6bb9c",
            "sha256:cd3933401b9b4f6ed9ccb443166d162e5541e1b7d74ffda728a1af9ee678338b",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-07-24T11:52:52.493034466+08:00"
    }
}

更多版本

ghcr.io/usestrix/strix-sandbox:0.1.10

linux/amd64 ghcr.io8.43GB2025-12-05 16:56
1151

ghcr.io/usestrix/strix-sandbox:0.1.11

linux/amd64 ghcr.io9.33GB2026-01-23 14:40
638

ghcr.io/usestrix/strix-sandbox:0.1.12

linux/amd64 ghcr.io9.01GB2026-03-03 15:32
423

ghcr.io/usestrix/strix-sandbox:0.1.13

linux/amd64 ghcr.io9.87GB2026-03-26 10:55
579

ghcr.io/usestrix/strix-sandbox:1.0.0

linux/amd64 ghcr.io7.38GB2026-05-28 09:44
351

ghcr.io/usestrix/strix-sandbox:1.1.0

linux/amd64 ghcr.io3.81GB2026-07-24 11:56
14
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×