Create a VPS on Google Cloud Platform or Digital Ocean easily to use Offensive Docker and launch the assessments to the targets.

🎉🎉Digital Ocean Bonus🎉🎉 You can sign up with my referral link https://m.do.co/c/0d2d40f6a8a1 and get $100 free credit to try it out!

• Requirements
• Usage
  • 1.- Clone the repository
  • 2.- Credentials
    • For Google Cloud Platform
    • For Digital Ocean
    • SSH Private and Public keys
  • 3.- Full Automation: Terraform and Ansible
    • Google Cloud Platform
    • Digital Ocean
  • 4.- Access to VPS
  • 5.- Destroy the VPS
• 🛡️ Security
• ☕ Donations
• Contributing
• 📈 Stargazers over time
• License

• Terraform installed (Version used: v0.13.4)
• Ansible installed (Version used: 2.9.12)
• SSH private and public keys
• Google Cloud Platform or Digital Ocean account.

git clone --depth 1 https://github.com/aaaguirrep/offensive-docker-vps.git vps
cd vps

• Create credentials folder.

  mkdir credentials

• Create a new project.
• Create service account with "Compute Admin" role and download a key in json format in credentials folder.
• Rename the key to gcp.json
• Enable "Compute Engine API" for the project.

• Create a Personal access tokens with write permission and copy it. See Tutorial

• Inside credentials folder run ssh-keygen -t rsa -f offensive in the terminal. Empty passphrase is ok.
• It creates two files: private and public key.

• Enter to gcp folder and modify the next value:
  • In main.tf file change the project value with your project-id.
• Run the next commands:

# Initialize terraform provider
$ terraform init
Terraform has been successfully initialized!

# Create the resources
$ terraform apply -auto-approve
Apply complete! Resources: 6 added, 0 changed, 0 destroyed.
Outputs:
external_ip = x.x.x.x

• Copy the external_ip value

Note: The instance type and the region used are: n1-standard-1 and us-central1. You can change the values on server.tf and main.tf

Demo

• Enter to digital-ocean folder
• With the personal access token copied run export TF_VAR_do_token="Personal_Access_Token_Here"
• Run the next commands:

# Initialize terraform provider
$ terraform init
Terraform has been successfully initialized!

# Create the resources
$ terraform apply -auto-approve
Apply complete! Resources: 6 added, 0 changed, 0 destroyed.
Outputs:
external_ip = x.x.x.x

• Copy the external_ip value

Note: The droplet type and the region used are: s-2vcpu-4gb and nyc3. You can change the values on server.tf and variables.tf

Demo

• In gcp or digital-ocean folder run the next command. Change x.x.x.x by external_ip value copied.

# Access to VPS
$ ssh [email protected] -i ../credentials/offensive

Demo

• In gcp or digital-ocean folder run the next command.

# Destroy the resource
$ terraform destroy -auto-approve

⚠️Note: For Digital Ocean, if you dont have a default VPC created in the region used it shows an error to destroy the VPC but no problem, it will destroy the others resources.

The service fail2ban has been installed to avoid brute force and block non-authorized users. 👻👻

Thanks for your donations, are always appreciated.

Contributing Guide

MIT

Copyright (c) 2020, Arsenio Aguirre