Ghostwriter on Ubuntu 24.04 LTS by cloudimg

Ghostwriter on Ubuntu 24.04 LTS

Ghostwriter is an open source engagement and project management platform built for offensive security and red teams. It gives consultancies and internal security teams one place to plan assessments, track clients and projects, manage findings, and generate polished reports, so the operational side of an engagement stops living in scattered spreadsheets and documents.

Teams use it to schedule projects and assign operators, check infrastructure such as domains and servers in and out, build a reusable library of findings and observations, and produce consistent Word and PowerPoint deliverables from templates. A GraphQL API and a real time collaboration service let multiple operators work together and integrate Ghostwriter with the rest of their tooling.

What cloudimg delivers

This image runs the official upstream Ghostwriter production stack under Docker, managed by the official ghostwriter command line tool and fronted by nginx over HTTPS. The web console, the GraphQL API and the collaboration server are all served behind a single TLS front door.

• Secure by default — all secrets and a unique administrator password are generated on first boot and written to a root only file, so no two instances share a credential and nothing is baked into the image
• The application learns its own public address on every boot, so the console works over HTTPS without hand editing
• A self signed certificate out of the box, ready to be replaced with your own trusted certificate and DNS name
• The base is fully patched with unattended security upgrades enabled, and a swap file is provisioned so the multi container stack has headroom
• A paired step by step deployment guide and 24/7 cloudimg support

Licensing — BSD 3-Clause, free. The cloudimg charge of $0.04 per vCPU hour covers packaging, security patching, image maintenance and 24/7 support. Recommended size: Standard_B2s to start, scaling up for heavier use. Prerequisites: an Azure subscription, a VNet and an SSH key; the network security group should permit ports 22 and 443.