A feature-rich pentesting Docker image based on Debian 12, bundled with a Python CLI wrapper to manage images and containers effortlessly.
The image ships with 100+ pre-installed offensive security tools, wordlists and privilege-escalation resources so you can spin up a ready-to-go pentest environment in seconds.
-
Docker (daemon running)
-
Python 3
-
xhost (usually part of
xorgorx11-xserver-utils) — required for GUI apps (BloodHound)
git clone https://github.com/og-casque/sadela.git
cd sadela
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt./sadela.py -pYou can also specify a version:
./sadela.py -p -i v0.3
./sadela.py -r -n mypentestWith a workspace and shared directory:
./sadela.py -r -n mypentest -w /path/to/project -s /path/to/shared/tools./sadela.py -r -n mypentestThe wrapper detects the container state and starts/attaches automatically.
./sadela.py -l./sadela.py -R -n mypentest./sadela.py -b # standard build
./sadela.py -b -d # debug/verbose build (--no-cache --progress=plain)| Flag | Long | Description |
|---|---|---|
-p |
--pull |
Pull the image from GHCR (use -i to specify a version) |
-b |
--build |
Build the Docker image locally |
-d |
--debug |
Verbose build output (implies --no-cache --progress=plain) |
-f |
--dockerfile |
Path to Dockerfile (default: BuildDir/Dockerfile.debian) |
-r |
--run |
Create, start, or resume a container |
-n |
--name |
Container name (required for -r, -R) |
-w |
--work-dir |
Host directory mounted at /workspace (read-write) |
-s |
--shared-dir |
Host directory mounted at /shared (read-only) |
-i |
--image |
Image tag (e.g. v0.3 or full ghcr.io/… tag) |
-l |
--list |
List all tracked containers and images |
-R |
--rm |
Delete a container |
-I |
--rmi |
Remove an image (requires -i; refuses if containers reference it) |
- Linux only — tested on X11-based desktop environments. GUI applications (BloodHound) require X11.
- Wayland is not supported for GUI forwarding; use XWayland or an X11 session.
- This project is under active development — some edge cases may not be handled. All pre-installed tools should work out of the box.