Custom Kasm Workspace Images

Custom Kasm workspace containers for open-source cybersecurity tools, automatically rebuilt when upstream projects release new versions.

Images are published to the GitHub Container Registry.

Adding the Registry

Add the DoubtfulTurnip 3rd party registry to your Kasm instance — see Kasm's registry documentation.

Registry URL: https://doubtfulturnip.github.io/doubtfulturnip-kasm-registry/

Workspaces

TruffleHog

Secrets scanning tool with a custom Streamlit web interface for running scans without the command line. Image: ghcr.io/doubtfulturnip/trufflehog-kasm:latest License: AGPL-3.0

---

SherlockWebUI

Hunt down social media accounts by username across social networks, wrapped in a Streamlit web interface. Image: ghcr.io/doubtfulturnip/sherlockwebui-kasm:latest License: MIT

---

SocialAnalyzer

API, CLI and web application for analysing and finding a person's profile across social media. Image: ghcr.io/doubtfulturnip/socialanalyzer-kasm:latest License: AGPL-3.0

---

Takajo

EVTX analysis workspace combining Hayabusa (timeline generation), Takajō (post-processing), and Chainsaw (Sigma-based threat hunting).

• Hayabusa — AGPL-3.0
• Takajō — AGPL-3.0
• Chainsaw — GPL-3.0

Image: ghcr.io/doubtfulturnip/takajo-kasm:latest

---

Webcheck

Comprehensive OSINT tool for analysing any website. Image: ghcr.io/doubtfulturnip/webcheck-kasm:latest License: MIT

---

BloodHound CE

Active Directory and Azure attack path analysis tool. Image: ghcr.io/doubtfulturnip/bloodhound-kasm:latest License: Apache-2.0

---

Epagneul

Windows event log visualisation and analysis tool. Image: ghcr.io/doubtfulturnip/epagneul-kasm:latest Note: Epagneul does not currently carry a license in its repository.

---

Slasher

Web application vulnerability scanner. Image: ghcr.io/doubtfulturnip/slasher-kasm:latest License: MIT

---

Building from Source

docker build -t <image-name>:latest ./<Workspace-Dir>

See Kasm's custom image documentation for deployment instructions.