Gremlin - Docker Edition

Run Gremlin inside a Docker container and use it to run attacks against the host system.

Usage

For complete instructions, see How to Install and Use Gremlin in a Docker Container.

Set required environment variables:

export GREMLIN_TEAM_ID=<your-team-id>
export GREMLIN_TEAM_SECRET=<your-team-secret>
export GREMLIN_IDENTIFIER=<optional-client-identifier>

Use Docker container to run attack against host system:

docker run -it --rm --net=host \
    --cap-add=NET_ADMIN --cap-add=SYS_BOOT --cap-add=SYS_TIME \
    --cap-add=KILL \
    -v $PWD/var/lib/gremlin:/var/lib/gremlin \
    -v $PWD/var/log/gremlin:/var/log/gremlin \
    -e GREMLIN_TEAM_ID="$GREMLIN_TEAM_ID" \
    -e GREMLIN_TEAM_SECRET="$GREMLIN_TEAM_SECRET" \
    -e GREMLIN_IDENTIFIER="${GREMLIN_IDENTIFIER:-docker-gremlin}" \
    gremlin/gremlin attack ...

Start Gremlin daemon to attack host via web application:

docker run -d --net=host \
    --cap-add=NET_ADMIN --cap-add=SYS_BOOT --cap-add=SYS_TIME \
    --cap-add=KILL \
    -v $PWD/var/lib/gremlin:/var/lib/gremlin \
    -v $PWD/var/log/gremlin:/var/log/gremlin \
    -e GREMLIN_TEAM_ID="$GREMLIN_TEAM_ID" \
    -e GREMLIN_TEAM_SECRET="$GREMLIN_TEAM_SECRET" \
    -e GREMLIN_IDENTIFIER="${GREMLIN_IDENTIFIER:-docker-gremlin}" \
    gremlin/gremlin daemon