Base
Hardened build
minimal ports, security patches applied at build time
Ghostwriter on Ubuntu 24.04 LTS
Azure
Security
Ghostwriter, the open source engagement and project management platform that gives offensive security teams one home for clients, projects, findings and reports.
Overview
Ghostwriter is an engagement and project management platform built for offensive security and red teams. It replaces scattered spreadsheets and documents with one place to plan assessments, track clients and projects, check infrastructure such as domains and servers in and out, build a reusable library of findings and observations, and generate polished Word and PowerPoint deliverables from templates. A GraphQL API and a real time collaboration service let multiple operators work together and wire Ghostwriter into the rest of their tooling.
Consultancies use it to schedule projects and assign operators, keep a consistent findings library across engagements, and turn assessment work into repeatable, well formatted reports. Internal security teams use the same workflow to run and document their own programme of testing.
Why the cloudimg image
cloudimg ships Ghostwriter as a complete, secure by default appliance running the official upstream production stack behind a single TLS front door, so there is no compose file to assemble or registry to reach. Every secret and a unique administrator password are generated on first boot and written to a root only file, so no two instances share a credential and nothing is baked into the image. The application learns its own public address on every boot so the console works over HTTPS without hand editing, a self signed certificate is ready to be swapped for your own, the base is fully patched with unattended security upgrades and provisioned with swap headroom for the multi container stack, and every deployment comes with a paired deploy guide and 24/7 support.
Common uses
- Manage red team clients, projects and operators in one place
- Maintain a reusable findings library across engagements
- Generate consistent Word and PowerPoint assessment reports
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.