hub / github.com/chaitin/veinmind-tools
github.com/chaitin/veinmind-tools @v2.1.5
Chat with this repo
671 symbols
1,808 edges
179 files
90 documented · 13%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
veinmind-tools
veinmind-tools 是由长亭科技自研，牧云团队孵化，基于 veinmind-sdk 打造的容器安全工具集
veinmind, 中文名为问脉，寓意 容器安全见筋脉，望闻问切治病害。 旨在成为云原生领域的一剂良方
中文文档 | English
🔥 Demo
问脉已接入 openai, 可以使用 openai 对扫描的结果进行人性化分析，让您更加清晰的了解本次扫描发现了哪些风险。
🕹️ 快速开始
1. 确保机器上正确安装 docker
docker info
2. 安装 veinmind-runner 镜像
docker pull registry.veinmind.tech/veinmind/veinmind-runner:latest
3. 下载 veinmind-runner 平行容器启动脚本
wget -q https://download.veinmind.tech/scripts/veinmind-runner-parallel-container-run.sh -O run.sh && chmod +x run.sh
4. 快速扫描本地镜像/容器
./run.sh scan [image/container]
5. 使用 openAI 智能分析
./run.sh scan [image/container] --enable-analyze --openai-token <your_openai_token>
注: 使用 openAI 时，请确保当前网络能够访问openAI 平行容器启动时，需要手动通过 docker run -e http_proxy=xxxx -e https_proxy=xxxx 设置代理（非全局代理的场景下）
🔨 工具列表
| 工具 | 功能 |
|---|---|
| veinmind-runner | 扫描工具运行宿主 |
| veinmind-malicious | 扫描容器/镜像中的恶意文件 |
| veinmind-weakpass | 扫描容器/镜像中的弱口令 |
| veinmind-log4j2 | 扫描容器/镜像中的log4j2漏洞 |
| veinmind-minio | 扫描容器/镜像中的minio漏洞 |
| veinmind-sensitive | 扫描镜像中的敏感信息 |
| veinmind-backdoor | 扫描镜像中的后门 |
| veinmind-history | 扫描镜像中的异常历史命令 |
| veinmind-vuln | 扫描容器/镜像中的资产信息和漏洞 |
| veinmind-webshell | 扫描镜像中的 Webshell |
| veinmind-unsafe-mount | 扫描容器中的不安全挂载目录 |
| veinmind-iac | 扫描镜像/集群的IaC文件 |
| veinmind-escape | 扫描容器/镜像中的逃逸风险 |
| veinmind-privilege-escalation | 扫描容器/镜像中的提权风险 |
| veinmind-backdoor | 扫描容器/镜像中的后门 |
| PS: 目前所有工具均已支持平行容器的方式运行 |
🧑💻 编写插件
可以通过 example 快速创建一个 veinmind-tools 插件, 具体查看 veinmind-example
☁️ 云原生设施兼容性
| 名称 | 类别 | 是否兼容 |
|---|---|---|
| Jenkins | CI/CD | ✔️ |
| Gitlab CI | CI/CD | ✔️ |
| Github Action | CI/CD | ✔️ |
| DockerHub | 镜像仓库 | ✔️ |
| Docker Registry | 镜像仓库 | ✔️ |
| Harbor | 镜像仓库 | ✔️ |
| Docker | 容器运行时 | ✔️ |
| Containerd | 容器运行时 | ✔️ |
| Kubernetes | 集群 | ✔️ |
🛴 工作原理
🏘️ 联系我们
- 您可以通过 GitHub Issue 直接进行 Bug 反馈和功能建议。
- 扫描下方二维码可以通过添加问脉小助手，以加入问脉用户讨论群进行详细讨论
✨ CTStack
veinmind-tools 现已加入 CTStack 社区
✨ 404星链计划
veinmind-tools 现已加入 404星链计划
✨ Star History
Extension points exported contracts — how you extend this code
IService (Interface)(no doc) [7 implementers]
plugins/go/veinmind-weakpass/service/base.go
DispatchTask (FuncType)
DispatchTask declare func that how to scan a target object
veinmind-runner/pkg/scan/scan.go
Hash (Interface)
(no doc) [5 implementers]
plugins/go/veinmind-weakpass/hash/base.go
Client (Interface)
(no doc) [1 implementers]
veinmind-runner/pkg/registry/registry.go
Analyzer (Interface)
(no doc) [2 implementers]
plugins/go/veinmind-trace/pkg/analyzer/analyzer.go
Runner (Interface)
(no doc) [1 implementers]
veinmind-runner/pkg/authz/authz_server.go
CheckFunc (FuncType)
(no doc)
plugins/go/veinmind-backdoor/service/base.go
Option (FuncType)
(no doc)
veinmind-runner/pkg/registry/registry.go
Core symbols most depended-on inside this repo
Errorcalled by 120
plugins/go/veinmind-malicious/sdk/av/clamav/client.go
ID
called by 67
plugins/go/veinmind-weakpass/hash/base.go
Contains
called by 54
plugins/go/veinmind-sensitive/cache/white_path.go
Close
called by 48
veinmind-runner/pkg/authz/authz_server.go
String
called by 28
veinmind-runner/pkg/log/module.go
Name
called by 21
plugins/go/veinmind-weakpass/service/base.go
Read
called by 18
plugins/go/veinmind-backdoor/kernel/kcoremem.go
file2FileDetail
called by 14
plugins/go/veinmind-backdoor/service/base.go
Shape
Languages
Go94%
Python6%
Modules by API surface
veinmind-runner/pkg/authz/docker_plugin.go17 symbols
veinmind-runner/pkg/authz/authz_server.go16 symbols
veinmind-runner/pkg/plugind/plugind_service.go14 symbols
plugins/go/veinmind-weakpass/pkg/innodb/innodbParser.go13 symbols
plugins/go/veinmind-weakpass/hash/mysql_native_password.go13 symbols
plugins/go/veinmind-escape/pkg/priv.go13 symbols
plugins/go/veinmind-vuln/sdk/osv/models.go12 symbols
plugins/go/veinmind-escape/pkg/cve.go12 symbols
plugins/python/veinmind-sensitive/scan.py10 symbols
plugins/go/veinmind-webshell/pkg/detect/detect.go10 symbols
plugins/go/veinmind-weakpass/service/parser_test.go9 symbols
plugins/go/veinmind-backdoor/service/rootkit.go9 symbols
For agents
$ claude mcp add veinmind-tools \
-- python -m otcore.mcp_server <graph>