Key Features • Installation • Credit • License
- Template engagements and testcases
- Framework friendly
- Role-based Access Control & MFA
- Inbuilt DOCX reporting + custom template support
- Simple and secure installation steps - New feature in fork!
How PurpleOps is different:
- No attribution needed
- Hackable, no "no-reversing" clauses
- No over complications with tomcat, redis, manual database transplanting and an obtuce permission model
This leverages Docker and an nginx reverse proxy to install and host PurpleOps.
If a custom SSL certificate is not provided, the installation will genererate self-signed certificates.
These steps will install required dependencies like certbot, docker and docker compose.
Tested on:
- Debian 12
- Kali 2024.3
- Elevate to root:
sudo su -- Install depenendencies. It's best to run these commands one by one:
# installs certbot and other dependencies
apt update
apt-get install certbot net-tools apt-transport-https ca-certificates curl software-properties-common git -y- Install Docker/Docker Compose
git clone https://github.com/shadyeip/PurpleOps ~/PurpleOps
cd setup/
sudo bash get-docker.sh
cd ~/PurpleOps# Tested on Debian 12 and Kali 2024.3
# Clone this repository
git clone https://github.com/shadyeip/PurpleOps ~/PurpleOps
# Go into the repository
cd ~/PurpleOps
# Run the app with docker (add `-d` to run in background)
sudo docker compose up -d
# PurpleOps should now by available on https://localhost. 443 is exposed so should be accessible via direct IP.TODO
sudo apt install ufw -y
sudo ufw allow 22
sudo ufw deny 80
sudo ufw deny 443
sudo ufw insert 1 allow from 100.100.100.100/24 to any port 443
sudo ufw enable- Credit to original PurpleOps developers. This is their project. See fork parent.
- Atomic Red Team (LICENSE) for sample commands
- CyberCX for foundational support
Apache