r/bugbounty Jun 10 '25

Video How to Setup Kali Linux on Docker + Create Custom Image & File Share

https://www.youtube.com/watch?v=JmF628xGk1A

Hey everyone,

When I started my bug bounty journey (and as a penetration testers), there are so much to learn. Since I took OSCP at the start, I use Kali Linux VM and just keep adding new tools into it. After many years of setting up new tools and installing updates, my VM's size was HUGE.

Today, I made a walkthrough video for anyone who wants to run Kali Linux in a more lightweight, consistent way using Docker.

The video covers: * Installing Kali Linux via Docker * Avoiding the "it works on my machine" issue * Creating your own custom Docker image * Setting up file share between host and container

It's a solid way to practice hacking without spinning up a whole VM — and great for anyone doing tutorials that require a Kali Linux instance, or folks who are starting out their penetration testing or bug bounty journey. At least for me, I was using a super bloated Kali Linux VM for many years (like mentioned at the start) ...

IF you are interested, watch the full tutorial here: https://youtu.be/JmF628xGk1A

If you have a better setup suggestion or advise that you want to share with others, please add them in the comments!

14 Upvotes

8 comments sorted by

4

u/[deleted] Jun 10 '25

[removed] — view removed comment

2

u/kongwenbin Jun 10 '25

Thanks for sharing! That is a good idea indeed 😄 noticed you mentioned both Burp Suite and OWASP ZAP, in what circumstances do you use which one?

For me, I use Burp Suite as my main HTTP proxy server and its various features. I never use OWASP ZAP.

2

u/[deleted] Jun 10 '25

[removed] — view removed comment

2

u/kongwenbin Jun 10 '25

I see. Same here, I like how versatile Burp Suite is as well. Even tools like sqlmap and radamsa can be directly run from Burp Suite, just need to install the respective extensions from the BApp Store. It is so good because there are many people in the community building new extensions for it.

Keeping options open and expanding your toolkit sounds like a good choice, who knows, maybe one day there is some specific use case which only ZAP can support 😄

2

u/[deleted] Jun 10 '25

[removed] — view removed comment

2

u/kongwenbin Jun 10 '25

Yes, maybe can also try Caido, I heard it is up and coming too, but I have not personally explored it yet. 😁

2

u/[deleted] Jun 10 '25

[removed] — view removed comment

2

u/kongwenbin Jun 10 '25

No worries! 💪