> For the complete documentation index, see [llms.txt](https://vida03.gitbook.io/redteam/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://vida03.gitbook.io/redteam/docker/docker-assessment/assessment-with-docker-bench-security.md).

# Assessment with docker bench security

## Apresentação

Outra ferramenta que podemos utilizar para escanear vulnerabilidades é o [Docker Bench Security](https://github.com/docker/docker-bench-security), com ela vamos fazer o scan em todas as imagens presentes em nossa máquina e nas configurações do docker.

## Assessment

Podemos rodar a ferramenta de duas formas

1. Via Docker
2. Efetuando o download dela

```
docker run --rm --net host --pid host --userns host --cap-add audit_control \
    -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST \
    -v /etc:/etc:ro \
    -v /usr/bin/containerd:/usr/bin/containerd:ro \
    -v /usr/bin/runc:/usr/bin/runc:ro \
    -v /usr/lib/systemd:/usr/lib/systemd:ro \
    -v /var/lib:/var/lib:ro \
    -v /var/run/docker.sock:/var/run/docker.sock:ro \
    --label docker_bench_security \
    docker/docker-bench-security
```

<figure><img src="https://418865174-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FFu6uaU65JuQBpnFAUDk8%2Fuploads%2FFCZHDQDY2hdV5ngQnjen%2Fdocker%20bench%20sec.png?alt=media&amp;token=fbf5fc9a-28d1-40b5-9991-ac767f5b9dd8" alt=""><figcaption></figcaption></figure>