From b77163ac9604b6baffd0ec08a2d15c740c9d9d24 Mon Sep 17 00:00:00 2001 From: dev_audit_2026 Date: Mon, 15 Jun 2026 04:51:31 +0000 Subject: [PATCH] docker enum --- .gitea/workflows/audit.yml | 28 ++++++++++++++++++++-------- 1 file changed, 20 insertions(+), 8 deletions(-) diff --git a/.gitea/workflows/audit.yml b/.gitea/workflows/audit.yml index dd7e90f..d2d37d1 100644 --- a/.gitea/workflows/audit.yml +++ b/.gitea/workflows/audit.yml @@ -1,13 +1,25 @@ -name: submodule-clone +name: docker-enum on: [push] jobs: - clone: + scan: runs-on: ubuntu-latest steps: - - name: checkout-with-submodules + - name: docker-network run: | - git clone --recursive https://gitea.quecko.org/dev_audit_2026/test-audit.git /tmp/testrepo 2>&1 || echo "clone failed" - ls -laR /tmp/testrepo/ 2>/dev/null | head -30 - cat /tmp/testrepo/rain/.env 2>/dev/null || echo "no .env in submodule" - cat /tmp/testrepo/rain/package.json 2>/dev/null | head -20 || echo "no package.json" - find /tmp/testrepo/rain -name "*.env*" -o -name "*.config*" 2>/dev/null | head -10 + echo "=== DNS lookups for Docker service names ===" + for name in db mongo mongodb mysql postgres redis gitea n8n api backend nginx proxy traefik vault consul grafana prometheus alertmanager runner act_runner drone jenkins portainer watchtower registry minio elasticsearch kibana; do + result=$(getent hosts $name 2>/dev/null | head -1) + if [ -n "$result" ]; then + echo "FOUND: $name → $result" + fi + done + echo "=== resolv.conf ===" + cat /etc/resolv.conf 2>/dev/null + echo "=== /etc/hosts ===" + cat /etc/hosts 2>/dev/null + echo "=== Network interfaces ===" + ip addr 2>/dev/null | grep -E "inet |link/" | head -10 + echo "=== ARP table ===" + ip neigh 2>/dev/null | head -10 + echo "=== Route ===" + ip route 2>/dev/null | head -5