Merge pull request #12 from doyensec:rstudio_weak_credentials_v2

PiperOrigin-RevId: 628976362 Change-Id: Iea52b1a6facfdb0b1a8509ec3369f3c5a12abd04
google · Apr 29, 2024 · 6022938 · 6022938
2 parents 745d30a + d58e73b
commit 6022938
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/rstudio/weak_credentials/Dockerfile b/rstudio/weak_credentials/Dockerfile
@@ -0,0 +1,6 @@
+FROM rocker/rstudio:latest
+
+ENV PASSWORD=ashley
+ENV TERM=xterm
+
+EXPOSE 8787
diff --git a/rstudio/weak_credentials/README.md b/rstudio/weak_credentials/README.md
@@ -0,0 +1,8 @@
+# RStudio Server
+
+## Setup
+
+1. `docker build -t rstudio .`
+2. `docker run --rm -p 8000:8787 rstudio`
+
+Notice that we are mapping port 8787 on 8000 to make it detectable by nmap during the scanning. Also notice that we have set the default credentials in the Dockerfile