2020-01-15 10:37:48 +00:00
|
|
|
FROM alpine
|
|
|
|
|
#
|
|
|
|
|
# Install packages
|
|
|
|
|
RUN apk -U add \
|
|
|
|
|
git \
|
|
|
|
|
libcap \
|
|
|
|
|
openssl \
|
|
|
|
|
python3 \
|
|
|
|
|
python3-dev && \
|
2020-01-15 13:59:11 +00:00
|
|
|
#
|
|
|
|
|
pip3 install --no-cache-dir python-json-logger && \
|
2020-01-15 10:37:48 +00:00
|
|
|
#
|
2020-01-15 12:14:23 +00:00
|
|
|
# Install CitrixHoneypot from GitHub
|
2020-01-15 13:59:11 +00:00
|
|
|
# git clone --depth=1 https://github.com/malwaretech/citrixhoneypot /opt/citrixhoneypot && \
|
|
|
|
|
git clone --depth=1 https://github.com/vorband/CitrixHoneypot /opt/citrixhoneypot && \
|
2020-01-15 10:37:48 +00:00
|
|
|
#
|
|
|
|
|
# Setup user, groups and configs
|
|
|
|
|
mkdir -p /opt/citrixhoneypot/logs /opt/citrixhoneypot/ssl && \
|
|
|
|
|
openssl req \
|
|
|
|
|
-nodes \
|
|
|
|
|
-x509 \
|
|
|
|
|
-newkey rsa:2048 \
|
|
|
|
|
-keyout "/opt/citrixhoneypot/ssl/key.pem" \
|
|
|
|
|
-out "/opt/citrixhoneypot/ssl/cert.pem" \
|
|
|
|
|
-days 365 \
|
|
|
|
|
-subj '/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd' && \
|
|
|
|
|
addgroup -g 2000 citrixhoneypot && \
|
|
|
|
|
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 citrixhoneypot && \
|
|
|
|
|
chown -R citrixhoneypot:citrixhoneypot /opt/citrixhoneypot && \
|
|
|
|
|
setcap cap_net_bind_service=+ep /usr/bin/python3.8 && \
|
|
|
|
|
#
|
|
|
|
|
# Clean up
|
|
|
|
|
apk del --purge git \
|
|
|
|
|
openssl \
|
|
|
|
|
python3-dev && \
|
|
|
|
|
rm -rf /root/* && \
|
|
|
|
|
rm -rf /var/cache/apk/*
|
|
|
|
|
#
|
|
|
|
|
# Set workdir and start citrixhoneypot
|
|
|
|
|
STOPSIGNAL SIGINT
|
|
|
|
|
USER citrixhoneypot:citrixhoneypot
|
|
|
|
|
WORKDIR /opt/citrixhoneypot/
|
|
|
|
|
CMD nohup /usr/bin/python3 CitrixHoneypot.py
|
