logo
ghcr.io/usestrix/strix-sandbox:1.3.0
linux/amd64 ghcr.io

Strix Sandbox镜像是Strix项目提供的安全沙箱环境,用于隔离执行代码或进行安全测试,确保执行过程中的安全性和稳定性,为相关应用场景提供可靠的隔离运行能力。

18
浏览次数
4.07GB
镜像大小
国内镜像
swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0
源镜像
ghcr.io/usestrix/strix-sandbox:1.3.0
镜像ID
sha256:bc4947dc64c97f58be4fa0200292346917543c5ed4b1c6a914fe9d6c40786aa0
镜像 TAG
1.3.0
镜像大小
4.07GB
平台架构
linux/amd64
镜像源
ghcr.io
CMD
启动入口
docker-entrypoint.sh
工作目录
/workspace
OS/平台
linux/amd64
镜像创建
2026-08-06T15:38:26.588216603Z
同步时间
2026-08-29 17:43
浏览量
18 次
贡献者
⚙️ 环境变量 11
KeyValue
PATH=/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin 0
LANG=C.UTF-8 1
NPM_CONFIG_PREFIX=/home/pentester/.npm-global 2
AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/chromium 3
AGENT_BROWSER_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 4
AGENT_BROWSER_ARGS=--disable-blink-features=AutomationControlled,--no-first-run,--no-default-browser-check,--lang=en-US 5
AGENT_BROWSER_SCREENSHOT_DIR=/workspace/.agent-browser-screenshots 6
VIRTUAL_ENV=/app/.venv 7
REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt 8
SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt 9
PYTHONPATH=/opt/strix-python 10
🏷️ 镜像标签 11
KeyValue
AI Agent Penetration Testing Environment with Comprehensive Automated Tools description
1.43.2 io.buildah.version
Kali Developers <devel@kali.org> org.opencontainers.image.authors
2026-08-02T04:04:49Z org.opencontainers.image.created
Official Kali Linux container image for kali-rolling org.opencontainers.image.description
4d1ddb93 org.opencontainers.image.revision
https://gitlab.com/kalilinux/build-scripts/kali-docker org.opencontainers.image.source
Kali Linux (kali-rolling branch) org.opencontainers.image.title
https://www.kali.org/ org.opencontainers.image.url
OffSec org.opencontainers.image.vendor
2026.08.02 org.opencontainers.image.version
🛡️ 镜像安全扫描
debian kali-rolling Trivy 2026-08-29 17:44 查看完整报告
4
低危 LOW
63
中危 MEDIUM
167
高危 HIGH
3
严重 CRITICAL
受影响目标 (59)
ghcr.io/usestrix/strix-sandbox:1.3.0 (debian kali-rolling) debian Node.js node-pkg Python python-pkg home/pentester/.tree-sitter/parsers/tree-sitter-bash/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-go/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-java/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-javascript/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-json/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-python/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-typescript/Cargo.lock cargo home/pentester/.tree-sitter/parsers/tree-sitter-yaml/Cargo.lock cargo home/pentester/go/bin/gospider gobinary home/pentester/go/bin/govulncheck gobinary home/pentester/go/bin/httpx gobinary home/pentester/go/bin/interactsh-client gobinary home/pentester/go/bin/katana gobinary home/pentester/go/bin/vulnx gobinary usr/local/bin/gitleaks gobinary usr/local/bin/trivy gobinary usr/local/bin/uv rustbinary usr/local/bin/uvx rustbinary /app/certs/ca.key /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.0.0_proxy /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.1.0_proxy /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.10.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.2.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.3.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.4.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.5.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.6.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.7.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.8.0_platform /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_collector /home/pentester/.local/nuclei-templates/helpers/payloads/cve-2023-34039-keys/id_rsa_vnera_keypair_6.9.0_platform /home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-37580.yaml /home/pentester/.local/nuclei-templates/http/cves/2021/CVE-2021-44910.yaml /home/pentester/.local/nuclei-templates/http/cves/2022/CVE-2022-32430.yaml /home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-22463.yaml /home/pentester/.local/nuclei-templates/http/cves/2023/CVE-2023-5074.yaml /home/pentester/.local/nuclei-templates/http/cves/2024/CVE-2024-43441.yaml /home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49001.yaml /home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-49002.yaml /home/pentester/.local/nuclei-templates/http/cves/2025/CVE-2025-69971.yaml /home/pentester/.local/nuclei-templates/http/global-matchers/secrets-patterns-rules.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/genieacs-default-jwt.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/nacos-authentication-bypass.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/nacos/nacos-create-user.yaml /home/pentester/.local/nuclei-templates/http/misconfiguration/symfony/symfony-default-key-rce.yaml /home/pentester/tools/jwt_tool/jwt_tool.py

Docker拉取命令

docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0
docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0  ghcr.io/usestrix/strix-sandbox:1.3.0

Containerd拉取命令

ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0
ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0  ghcr.io/usestrix/strix-sandbox:1.3.0

Shell快速替换命令

sed -i 's#ghcr.io/usestrix/strix-sandbox:1.3.0#swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0#' deployment.yaml

Ansible快速分发-Docker

#ansible k8s -m shell -a 'docker pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0 && docker tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0  ghcr.io/usestrix/strix-sandbox:1.3.0'

Ansible快速分发-Containerd

#ansible k8s -m shell -a 'ctr images pull swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0 && ctr images tag  swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0  ghcr.io/usestrix/strix-sandbox:1.3.0'

镜像构建历史


# 2026-08-06 23:38:26  0.00B 配置容器启动时运行的命令
ENTRYPOINT ["docker-entrypoint.sh"]
                        
# 2026-08-06 23:38:26  0.00B 设置工作目录为/workspace
WORKDIR /workspace
                        
# 2026-08-06 23:38:26  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-08-06 23:38:26  4.50KB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c chmod +x /usr/local/bin/docker-entrypoint.sh # buildkit
                        
# 2026-08-06 23:38:26  4.50KB 复制新文件或目录到容器中
COPY containers/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh # buildkit
                        
# 2026-08-06 23:38:26  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-08-06 23:38:26  6.62KB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c echo 'export PATH="/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:$PATH"' >> /home/pentester/.bashrc &&     echo 'export PATH="/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:$PATH"' >> /home/pentester/.profile # buildkit
                        
# 2026-08-06 23:38:26  0.00B 设置环境变量 PYTHONPATH
ENV PYTHONPATH=/opt/strix-python
                        
# 2026-08-06 23:38:26  24.37KB 复制新文件或目录到容器中
COPY --chown=pentester:pentester strix/tools/proxy/caido_api.py /opt/strix-python/caido_api.py # buildkit
                        
# 2026-08-06 23:38:26  81.80MB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c python3 -m venv /app/.venv &&     /app/.venv/bin/pip install --no-cache-dir caido-sdk-client &&     /app/.venv/bin/pip install --no-cache-dir         requests httpx beautifulsoup4 lxml pyjwt cryptography &&     /app/.venv/bin/pip install --no-cache-dir -r /home/pentester/tools/jwt_tool/requirements.txt &&     printf '%s\n'         '#!/bin/bash'         'exec /app/.venv/bin/python /home/pentester/tools/jwt_tool/jwt_tool.py "$@"'         > /home/pentester/.local/bin/jwt_tool &&     chmod +x /home/pentester/.local/bin/jwt_tool # buildkit
                        
# 2026-08-06 23:38:16  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-08-06 23:38:16  0.00B 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c mkdir -p /workspace && chown -R pentester:pentester /workspace /app # buildkit
                        
# 2026-08-06 23:38:16  0.00B 设置环境变量 SSL_CERT_FILE
ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
                        
# 2026-08-06 23:38:16  0.00B 设置环境变量 REQUESTS_CA_BUNDLE
ENV REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
                        
# 2026-08-06 23:38:16  188.37MB 执行命令并创建新的镜像层
RUN |2 TRUFFLEHOG_VERSION=3.95.9 CAIDO_VERSION=0.56.0 /bin/sh -c ARCH=$(uname -m) &&     if [ "$ARCH" = "x86_64" ]; then         CAIDO_ARCH="x86_64";     elif [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then         CAIDO_ARCH="aarch64";     else         echo "Unsupported architecture: $ARCH" && exit 1;     fi &&     wget -O caido-cli.tar.gz "https://caido.download/releases/v${CAIDO_VERSION}/caido-cli-v${CAIDO_VERSION}-linux-${CAIDO_ARCH}.tar.gz" &&     tar -xzf caido-cli.tar.gz &&     chmod +x caido-cli &&     rm caido-cli.tar.gz &&     mv caido-cli /usr/local/bin/ # buildkit
                        
# 2026-08-06 23:38:14  0.00B 定义构建参数
ARG CAIDO_VERSION=0.56.0
                        
# 2026-08-06 23:38:14  0.00B 设置工作目录为/app
WORKDIR /app
                        
# 2026-08-06 23:38:14  0.00B 设置环境变量 VIRTUAL_ENV
ENV VIRTUAL_ENV=/app/.venv
                        
# 2026-08-06 23:38:14  0.00B 设置环境变量 PATH
ENV PATH=/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
                        
# 2026-08-06 23:38:14  0.00B 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c apt-get autoremove -y &&     apt-get autoclean &&     rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* &&     find /usr/share/locale -mindepth 1 -maxdepth 1 -type d         ! -name 'en' ! -name 'en_US' ! -name 'C' -exec rm -rf {} + &&     rm -rf /usr/share/doc/* /usr/share/doc-base/* /usr/share/man/* # buildkit
                        
# 2026-08-06 23:38:11  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-08-06 23:38:11  9.50MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c npm install -g jshint # buildkit
                        
# 2026-08-06 23:38:10  337.13MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c pipx install semgrep &&     pipx install bandit # buildkit
                        
# 2026-08-06 23:38:07  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-08-06 23:38:07  189.94MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c apt-get install -y wapiti # buildkit
                        
# 2026-08-06 23:37:47  166.49MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin # buildkit
                        
# 2026-08-06 23:37:45  21.99MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c set -eux;     ARCH="$(uname -m)";     case "$ARCH" in         x86_64) GITLEAKS_ARCH="x64" ;;         aarch64|arm64) GITLEAKS_ARCH="arm64" ;;         *) echo "Unsupported architecture: $ARCH" >&2; exit 1 ;;     esac;     TAG="$(curl -fsSL https://api.github.com/repos/gitleaks/gitleaks/releases/latest | jq -r .tag_name)";     curl -fsSL "https://github.com/gitleaks/gitleaks/releases/download/${TAG}/gitleaks_${TAG#v}_linux_${GITLEAKS_ARCH}.tar.gz" -o /tmp/gitleaks.tgz;     tar -xzf /tmp/gitleaks.tgz -C /tmp;     install -m 0755 /tmp/gitleaks /usr/local/bin/gitleaks;     rm -f /tmp/gitleaks /tmp/gitleaks.tgz # buildkit
                        
# 2026-08-06 23:37:44  34.77MB 执行命令并创建新的镜像层
RUN |1 TRUFFLEHOG_VERSION=3.95.9 /bin/sh -c curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /home/pentester/.local/bin "v${TRUFFLEHOG_VERSION}" &&     chown -R pentester:pentester /home/pentester/.local # buildkit
                        
# 2026-08-06 23:37:35  0.00B 定义构建参数
ARG TRUFFLEHOG_VERSION=3.95.9
                        
# 2026-08-06 23:37:35  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-08-06 23:37:35  440.11KB 执行命令并创建新的镜像层
RUN /bin/sh -c git clone https://github.com/aravind0x7/JS-Snooper.git &&     chmod +x JS-Snooper/js_snooper.sh &&     git clone https://github.com/xchopath/jsniper.sh.git &&     chmod +x jsniper.sh/jsniper.sh &&     git clone https://github.com/ticarpi/jwt_tool.git &&     chmod +x jwt_tool/jwt_tool.py # buildkit
                        
# 2026-08-06 23:37:34  0.00B 设置工作目录为/home/pentester/tools
WORKDIR /home/pentester/tools
                        
# 2026-08-06 23:37:34  47.81MB 执行命令并创建新的镜像层
RUN /bin/sh -c set -eux;     TS_PARSER_DIR="/home/pentester/.tree-sitter/parsers";     mkdir -p "${TS_PARSER_DIR}";     for repo in tree-sitter-java tree-sitter-javascript tree-sitter-python tree-sitter-go tree-sitter-bash tree-sitter-json tree-sitter-yaml tree-sitter-typescript; do         if [ "$repo" = "tree-sitter-yaml" ]; then             repo_url="https://github.com/tree-sitter-grammars/${repo}.git";         else             repo_url="https://github.com/tree-sitter/${repo}.git";         fi;         if [ ! -d "${TS_PARSER_DIR}/${repo}" ]; then             git clone --depth 1 "${repo_url}" "${TS_PARSER_DIR}/${repo}";         fi;     done;     if [ -d "${TS_PARSER_DIR}/tree-sitter-typescript/typescript" ]; then         ln -sfn "${TS_PARSER_DIR}/tree-sitter-typescript/typescript" "${TS_PARSER_DIR}/tree-sitter-typescript-typescript";     fi;     if [ -d "${TS_PARSER_DIR}/tree-sitter-typescript/tsx" ]; then         ln -sfn "${TS_PARSER_DIR}/tree-sitter-typescript/tsx" "${TS_PARSER_DIR}/tree-sitter-typescript-tsx";     fi;     tree-sitter init-config >/dev/null 2>&1 || true;     TS_CONFIG="/home/pentester/.config/tree-sitter/config.json";     mkdir -p "$(dirname "${TS_CONFIG}")";     [ -f "${TS_CONFIG}" ] || printf '{}\n' > "${TS_CONFIG}";     TMP_CFG="$(mktemp)";     jq --arg p "${TS_PARSER_DIR}" '.["parser-directories"] = ((.["parser-directories"] // []) + [$p] | unique)' "${TS_CONFIG}" > "${TMP_CFG}";     mv "${TMP_CFG}" "${TS_CONFIG}" # buildkit
                        
# 2026-08-06 23:37:28  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c /home/pentester/.npm-global/bin/agent-browser doctor --offline --quick # buildkit
                        
# 2026-08-06 23:37:28  0.00B 设置环境变量 AGENT_BROWSER_SCREENSHOT_DIR
ENV AGENT_BROWSER_SCREENSHOT_DIR=/workspace/.agent-browser-screenshots
                        
# 2026-08-06 23:37:28  0.00B 设置环境变量 AGENT_BROWSER_ARGS
ENV AGENT_BROWSER_ARGS=--disable-blink-features=AutomationControlled,--no-first-run,--no-default-browser-check,--lang=en-US
                        
# 2026-08-06 23:37:28  0.00B 设置环境变量 AGENT_BROWSER_USER_AGENT
ENV AGENT_BROWSER_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
                        
# 2026-08-06 23:37:28  0.00B 设置环境变量 AGENT_BROWSER_EXECUTABLE_PATH
ENV AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/chromium
                        
# 2026-08-06 23:37:28  234.70MB 执行命令并创建新的镜像层
RUN /bin/sh -c npm install -g retire@latest &&     npm install -g eslint@latest &&     npm install -g js-beautify@latest &&     npm install -g @ast-grep/cli@latest &&     npm install -g tree-sitter-cli@latest &&     npm install -g agent-browser@0.26.0 &&     npm cache clean --force &&     ln -sf ast-grep /home/pentester/.npm-global/lib/node_modules/@ast-grep/cli/sg # buildkit
                        
# 2026-08-06 23:37:21  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c mkdir -p /home/pentester/.npm-global # buildkit
                        
# 2026-08-06 23:37:21  0.00B 设置环境变量 NPM_CONFIG_PREFIX
ENV NPM_CONFIG_PREFIX=/home/pentester/.npm-global
                        
# 2026-08-06 23:37:21  35.35MB 执行命令并创建新的镜像层
RUN /bin/sh -c pipx install arjun &&     pipx install dirsearch &&     pipx inject dirsearch 'setuptools<81' &&     pipx install wafw00f # buildkit
                        
# 2026-08-06 23:37:17  47.55MB 执行命令并创建新的镜像层
RUN /bin/sh -c nuclei -update-templates # buildkit
                        
# 2026-08-06 23:37:08  268.57MB 复制新文件或目录到容器中
COPY --chown=pentester:pentester /out/bin/ /home/pentester/go/bin/ # buildkit
                        
# 2026-08-06 23:37:08  0.00B 设置工作目录为/tmp
WORKDIR /tmp
                        
# 2026-08-06 23:37:07  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-08-06 23:37:07  56.30MB 执行命令并创建新的镜像层
RUN /bin/sh -c curl -LsSf https://astral.sh/uv/install.sh | env UV_INSTALL_DIR=/usr/local/bin sh # buildkit
                        
# 2026-08-06 23:37:07  183.70KB 执行命令并创建新的镜像层
RUN /bin/sh -c cp /app/certs/ca.crt /usr/local/share/ca-certificates/ca.crt &&     update-ca-certificates # buildkit
                        
# 2026-08-06 23:37:06  0.00B 指定运行容器时使用的用户
USER root
                        
# 2026-08-06 23:37:06  2.27KB 执行命令并创建新的镜像层
RUN /bin/sh -c openssl ecparam -name prime256v1 -genkey -noout -out /app/certs/ca.key &&     openssl req -x509 -new -key /app/certs/ca.key     -out /app/certs/ca.crt     -days 3650     -subj "/C=US/ST=CA/O=Security Testing/CN=Testing Root CA"     -addext "basicConstraints=critical,CA:TRUE"     -addext "keyUsage=critical,digitalSignature,keyEncipherment,keyCertSign" &&     openssl pkcs12 -export     -out /app/certs/ca.p12     -inkey /app/certs/ca.key     -in /app/certs/ca.crt     -passout pass:""     -name "Testing Root CA" &&     chmod 644 /app/certs/ca.crt &&     chmod 600 /app/certs/ca.key &&     chmod 600 /app/certs/ca.p12 # buildkit
                        
# 2026-08-06 23:37:06  0.00B 指定运行容器时使用的用户
USER pentester
                        
# 2026-08-06 23:37:06  165.00B 执行命令并创建新的镜像层
RUN /bin/sh -c setcap cap_net_raw,cap_net_admin,cap_net_bind_service+eip $(which nmap) # buildkit
                        
# 2026-08-06 23:37:06  2.16GB 执行命令并创建新的镜像层
RUN /bin/sh -c apt-get update &&     apt-get install -y --no-install-recommends     wget curl git vim nano unzip tar     apt-transport-https ca-certificates gnupg lsb-release     software-properties-common     gcc libc6-dev     python3 python3-pip python3-venv python3-setuptools     net-tools dnsutils whois     file xxd     jq parallel ripgrep grep     less procps htop     iproute2 iputils-ping netcat-traditional     nmap ncat ndiff     sqlmap nuclei subfinder naabu ffuf     nodejs npm pipx     golang-go     libcap2-bin     gdb     libnss3-tools     chromium fonts-liberation # buildkit
                        
# 2026-08-06 23:35:29  0.00B 执行命令并创建新的镜像层
RUN /bin/sh -c mkdir -p /home/pentester/tools /app/certs &&     chown -R pentester:pentester /app/certs /home/pentester/tools # buildkit
                        
# 2026-08-06 23:35:29  35.71KB 执行命令并创建新的镜像层
RUN /bin/sh -c useradd -m -s /bin/bash pentester &&     usermod -aG sudo pentester &&     echo "pentester ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers &&     touch /home/pentester/.hushlogin # buildkit
                        
# 2026-08-06 23:35:29  72.55MB 执行命令并创建新的镜像层
RUN /bin/sh -c apt-get update &&     apt-get install -y kali-archive-keyring sudo &&     apt-get update &&     apt-get upgrade -y # buildkit
                        
# 2026-08-06 23:35:29  0.00B 添加元数据标签
LABEL description=AI Agent Penetration Testing Environment with Comprehensive Automated Tools
                        
# 2026-08-02 12:06:00  119.63MB 
/bin/sh -c #(nop) CMD ["bash"]
                        
# 2026-08-02 12:05:58  0.00B 
/bin/sh -c #(nop) ENV LANG=C.UTF-8
                        
# 2026-08-02 12:05:58  0.00B 
/bin/sh -c #(nop) ADD file:fa5039f2d9d7715bdfe546f8493422023a074d883cccecd0c2a68b9bbab141c0 in /      
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) LABEL org.opencontainers.image.created="$BUILD_DATE"       org.opencontainers.image.source="$PROJECT_URL"       org.opencontainers.image.revision="$VCS_REF"       org.opencontainers.image.vendor="OffSec"       org.opencontainers.image.version="$VERSION"       org.opencontainers.image.title="Kali Linux ($RELEASE_DESCRIPTION branch)"       org.opencontainers.image.description="Official Kali Linux container image for $RELEASE_DESCRIPTION"       org.opencontainers.image.url="https://www.kali.org/"       org.opencontainers.image.authors="Kali Developers <devel@kali.org>"
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL RELEASE_DESCRIPTION TARBALL VCS_REF VERSION
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL TARBALL VCS_REF VERSION
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL VCS_REF VERSION
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE PROJECT_URL VERSION
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE VERSION
                        
# 2026-08-02 12:05:53  0.00B 
/bin/sh -c #(nop) ARG BUILD_DATE
                        
                    

镜像信息

{
    "Id": "sha256:bc4947dc64c97f58be4fa0200292346917543c5ed4b1c6a914fe9d6c40786aa0",
    "RepoTags": [
        "ghcr.io/usestrix/strix-sandbox:1.3.0",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox:1.3.0"
    ],
    "RepoDigests": [
        "ghcr.io/usestrix/strix-sandbox@sha256:f6906c3114e504fd1a218fcf028d7a0e46851118403a438b63956de6ea7c4331",
        "swr.cn-north-4.myhuaweicloud.com/ddn-k8s/ghcr.io/usestrix/strix-sandbox@sha256:554776e4f801a6bafca8d1c6852b35fd32955317dd5a9964b0267ddc01a03fac"
    ],
    "Parent": "",
    "Comment": "buildkit.dockerfile.v0",
    "Created": "2026-08-06T15:38:26.588216603Z",
    "Container": "",
    "ContainerConfig": null,
    "DockerVersion": "",
    "Author": "",
    "Config": {
        "Hostname": "",
        "Domainname": "",
        "User": "pentester",
        "AttachStdin": false,
        "AttachStdout": false,
        "AttachStderr": false,
        "Tty": false,
        "OpenStdin": false,
        "StdinOnce": false,
        "Env": [
            "PATH=/home/pentester/go/bin:/home/pentester/.local/bin:/home/pentester/.npm-global/bin:/app/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
            "LANG=C.UTF-8",
            "NPM_CONFIG_PREFIX=/home/pentester/.npm-global",
            "AGENT_BROWSER_EXECUTABLE_PATH=/usr/bin/chromium",
            "AGENT_BROWSER_USER_AGENT=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36",
            "AGENT_BROWSER_ARGS=--disable-blink-features=AutomationControlled,--no-first-run,--no-default-browser-check,--lang=en-US",
            "AGENT_BROWSER_SCREENSHOT_DIR=/workspace/.agent-browser-screenshots",
            "VIRTUAL_ENV=/app/.venv",
            "REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt",
            "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt",
            "PYTHONPATH=/opt/strix-python"
        ],
        "Cmd": null,
        "Image": "",
        "Volumes": null,
        "WorkingDir": "/workspace",
        "Entrypoint": [
            "docker-entrypoint.sh"
        ],
        "OnBuild": null,
        "Labels": {
            "description": "AI Agent Penetration Testing Environment with Comprehensive Automated Tools",
            "io.buildah.version": "1.43.2",
            "org.opencontainers.image.authors": "Kali Developers \u003cdevel@kali.org\u003e",
            "org.opencontainers.image.created": "2026-08-02T04:04:49Z",
            "org.opencontainers.image.description": "Official Kali Linux container image for kali-rolling",
            "org.opencontainers.image.revision": "4d1ddb93",
            "org.opencontainers.image.source": "https://gitlab.com/kalilinux/build-scripts/kali-docker",
            "org.opencontainers.image.title": "Kali Linux (kali-rolling branch)",
            "org.opencontainers.image.url": "https://www.kali.org/",
            "org.opencontainers.image.vendor": "OffSec",
            "org.opencontainers.image.version": "2026.08.02"
        }
    },
    "Architecture": "amd64",
    "Os": "linux",
    "Size": 4070854289,
    "GraphDriver": {
        "Data": {
            "LowerDir": "/var/lib/docker/overlay2/a2ec4d34007bf6399d0d103a0d4828801cf6a12befcfe1f175b596775fe4547a/diff:/var/lib/docker/overlay2/3bd2b4cbfc8e5ce7c43e05b272eb91d80a5f45854d698e1549143161dc77b717/diff:/var/lib/docker/overlay2/a782010bfbdce736f7ea8e88d3202d207a867a04e49f8b55ce75d6eab0e945aa/diff:/var/lib/docker/overlay2/f363c5ce2be698e8f723ab1936e18413f35bb9f16afd9d12ce4b9f99f7ec0060/diff:/var/lib/docker/overlay2/3ba346a08392eb69c16ef8b8c7f65093f45b26461cdc714b7bf55a4611542bec/diff:/var/lib/docker/overlay2/972b8656fe716723ff6b632b8e9d7f726dc7af497cfb28d896a2eed2e8679f72/diff:/var/lib/docker/overlay2/91f87a425678e6cf3a5410c4e3d55e9f392ba3029ba1c19eb944b52627d45c86/diff:/var/lib/docker/overlay2/dfaa1ebd39bc7ae4a988e18b6dff4a1b70673eb7a3c623fb234024fa64de5138/diff:/var/lib/docker/overlay2/43b631b809040574a8968ebf6c258091796c57b876d8583f5dc6937522068cfa/diff:/var/lib/docker/overlay2/12d6b87e88be0108185490a0c574986157831243aaf780f806748767df2f401d/diff:/var/lib/docker/overlay2/2ae264c9a36b3928f74d0041eaa8e2c78e825e87778389c59eb10316687e0e11/diff:/var/lib/docker/overlay2/51f6ed98f61ef201b1834cb6a91b80eef89f806f6e2b39b40f443650a6d4e46d/diff:/var/lib/docker/overlay2/26c22ac811c1fd7144237a26ad121dc8e089bdf9237db7b7079ef6cda1fd9167/diff:/var/lib/docker/overlay2/bff094012b97c7b3f113d989cef6f00314d2ffeec796b78be581fbd3788a04a0/diff:/var/lib/docker/overlay2/6fcec8a7c815846ebfe5abc4dcfc969550e82bbe8083f4c59d0e9cf6ecc2bfa7/diff:/var/lib/docker/overlay2/ae7fa5ab1c279f5378def42e2c5c553cc8b2220730263467b489111092e16e50/diff:/var/lib/docker/overlay2/f55c5dc66f4922d264985ec0eca17bb7ae50c69f777c1c81d03c96aff579a35b/diff:/var/lib/docker/overlay2/6743a138207a44ec436c8b43edb3cef18977ea3e0d18d29fb00845ea66ad1c76/diff:/var/lib/docker/overlay2/19e0b8eef248d9678c948ec26466bc43fee789c77b9d107eed1f121bd34c8e15/diff:/var/lib/docker/overlay2/a0cfe68674eb64c1e824dd1b7c7b38617454e64b7425153270a33f50bf2696ca/diff:/var/lib/docker/overlay2/f752a169833acd708033e68c72674893dd53ba820565d7b5552544ef04063899/diff:/var/lib/docker/overlay2/521c99cd59561a9fadc695217d283487802ad63dca10ac642759c6ed2b7fc969/diff:/var/lib/docker/overlay2/dc22973271a809712e3afe0d061f8ff5c5fe2d25ad5fc1330f08890127c2192e/diff:/var/lib/docker/overlay2/823d494ae8343ed9de7717f0bc0a906b49a780c89bbd7b902cbc42152df2e0d9/diff:/var/lib/docker/overlay2/604aa5e9e589f7a77f61b710417397ff5a5ecec7e1cff1e5ae15e4d43ed2f2e8/diff:/var/lib/docker/overlay2/56cbbffed04e6b53fd24eb73bdc962240c9c87f648069d117e0d646d1b33b344/diff:/var/lib/docker/overlay2/0934202a02fc58cf0f407484721f7344a06b372d7c3d2ae514a0f71bc9a888c4/diff:/var/lib/docker/overlay2/81b2e047a6c313f23a18008343c886a9cb66cac21645bf526057c32961353fc8/diff:/var/lib/docker/overlay2/0a5251ca1372b923ebbb49bcb6cfb5614ac987bd0604ffee9544fdab010d59c7/diff:/var/lib/docker/overlay2/3c35296516e5ec69ed1153415fa06758b1dc5d4580a7d8a9a64d2a62c816a980/diff:/var/lib/docker/overlay2/500c487f11cbde218817556f20ec6d137ea8da58284807e25f2096a9ef57f237/diff:/var/lib/docker/overlay2/0254b7ba625c40d9ca2e644a0952c7088049471c2657014b129f7329de288cfb/diff:/var/lib/docker/overlay2/912e18ed8962bafae49bf17546202e9b2cf2247076e66acf80884ad45dd324f9/diff:/var/lib/docker/overlay2/8d5e9353de98c9624dfb8d9724d5894c616b52b3b6f50cec83f6370274daa1b6/diff",
            "MergedDir": "/var/lib/docker/overlay2/22966107dc673a667a42632f200373b0245b53862aeb72c8ed14c0944eecbecc/merged",
            "UpperDir": "/var/lib/docker/overlay2/22966107dc673a667a42632f200373b0245b53862aeb72c8ed14c0944eecbecc/diff",
            "WorkDir": "/var/lib/docker/overlay2/22966107dc673a667a42632f200373b0245b53862aeb72c8ed14c0944eecbecc/work"
        },
        "Name": "overlay2"
    },
    "RootFS": {
        "Type": "layers",
        "Layers": [
            "sha256:ba0b5cb1248ffbae5e05d41b58f5326a0ed6a6c384728b006f1e39d2aa110fc9",
            "sha256:84c00aa78b623a388f7a6b20010bed4f3698f1975988920037cdf0c0dd7ec1f9",
            "sha256:33454f5293be57cbe4059ccac6b56919899a45627011c0bdebddba245a1c8821",
            "sha256:e03fe9e06048751003ae52cf76d3ed8008eb8e5b842f39fcdbcc2d6bd8d42d54",
            "sha256:a9598ae55aa85062ed8adea3537fb527460a28075787e278544bc4b97fcf80ad",
            "sha256:ca1bf549eb81ee1c4d218dc0f1245c7fef4f78c86e36e59db895eae3606542dd",
            "sha256:2d1175528eac86649651bf2ac8317650a690ab448f77cfb9bedb96972eab1774",
            "sha256:d63842259db6d4b8a53255a1a00a6c85ebc04a4f98702133de996148d39b5acc",
            "sha256:3ecb7e8232256dd47064372df57ceeed696466ecfc03e78cf6d2e292f05d7301",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:f84dc19de8489c23d08a7468cfd65bee5ee7b85c520ff3e0f1bcffb98ce777ba",
            "sha256:e9ee59282540087deff4fdb87d6e8556b6bdacbf51e75e8bc9ea8b4af50b0b83",
            "sha256:8864018b8d8ea9e690181a5a3786289ce77d4bd81ab369980d0824f9edc3f62a",
            "sha256:689e66e0be535fe9e90e51a3ee65b5a95fbc90a58212c5edf9ab12131d3604d5",
            "sha256:1710a23e47d732a75ba6a1206a2865fbd1e3de785e70e18289f61178872a81a3",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:2c96d93b0cabf8d8dba0577b856415c4731f76bce056b0278e95a7c7654f0df6",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:78d81502ff43c88df62ddb8515644f33cc669d36bef68be3bfcec64f422b96ee",
            "sha256:d343726d37f65c5777fb4553fefb9e931032f56974222024e2e063acb901483c",
            "sha256:9d447052eca661e3001725b1b2cd80dd66e05c0c47272e9a5f628f397cb246a6",
            "sha256:86c95dc5a5540e5f2b99a6e74431dc3fbf7d0b5679a2a8a206d377f00e57b77c",
            "sha256:6f898afd8b09d4a1d0a8f0061204de8c710de6bc51ebf8a6af0296d91252fd63",
            "sha256:784c50942b566166225b7599d0f68fe36e3aad8b5301af4d3ead8e16bfef8164",
            "sha256:7739a2cef96ed0007382b45ffdfd8681eb4685e0385ff119ea63ffaf0352f75f",
            "sha256:fabf1fc7601009f6faf21807297325b6c997d441b588ce78be584694dd6eb2a5",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
            "sha256:9899c8586eccc19bd6191a140842d9ae4f0c99907157785701d3f67cd9700dfe",
            "sha256:5b16a6881e995b7d36e629bbd3146eb1c398b774bd032f24713d343c0e86e654",
            "sha256:f230a7a2eb9e44355b41eb577de647838278e018da5f2854b6f61fffc2615654",
            "sha256:c3d744a4379cc7415f529ed5d2f4886ae3e58486482a29f3219f2d7ba7dd9d10",
            "sha256:b14b9767effe35637beae2d69e8fad52cce97a6f66ee96e9f6753b05c3cf6b9d",
            "sha256:6d769b113cd9e586de4be7a9baff12f97e018af26713d363774348615840aecd",
            "sha256:ed5ff37895889b2c5e298bf41be3271afdff9a985a91a5bd390735f17a020a9d",
            "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef"
        ]
    },
    "Metadata": {
        "LastTagTime": "2026-08-29T17:40:54.712186246+08:00"
    }
}

更多版本

ghcr.io/usestrix/strix-sandbox:0.1.10

linux/amd64 ghcr.io8.43GB2025-12-05 16:56
1253

ghcr.io/usestrix/strix-sandbox:0.1.11

linux/amd64 ghcr.io9.33GB2026-01-23 14:40
701

ghcr.io/usestrix/strix-sandbox:0.1.12

linux/amd64 ghcr.io9.01GB2026-03-03 15:32
489

ghcr.io/usestrix/strix-sandbox:0.1.13

linux/amd64 ghcr.io9.87GB2026-03-26 10:55
680

ghcr.io/usestrix/strix-sandbox:1.0.0

linux/amd64 ghcr.io7.38GB2026-05-28 09:44
470

ghcr.io/usestrix/strix-sandbox:1.1.0

linux/amd64 ghcr.io3.81GB2026-07-24 11:56
151

ghcr.io/usestrix/strix-sandbox:1.2.0

linux/amd64 ghcr.io3.81GB2026-08-03 15:50
113

ghcr.io/usestrix/strix-sandbox:1.3.0

linux/amd64 ghcr.io4.07GB2026-08-29 17:43
17
检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×