diff --git a/README.md b/README.md index b285c35b..0844024e 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,6 @@ and includes dockerized versions of the following honeypots * [cowrie](https://github.com/cowrie/cowrie), * [dionaea](https://github.com/DinoTools/dionaea), * [elasticpot](https://github.com/schmalle/ElasticpotPY), -* [glastopf](http://mushmush.org/), * [glutton](https://github.com/mushorg/glutton), * [heralding](https://github.com/johnnykv/heralding), * [honeypy](https://github.com/foospidy/HoneyPy), @@ -30,6 +29,7 @@ Furthermore we use the following tools * [Cyberchef](https://gchq.github.io/CyberChef/) a web app for encryption, encoding, compression and data analysis. * [ELK stack](https://www.elastic.co/videos) to beautifully visualize all the events captured by T-Pot. * [Elasticsearch Head](https://mobz.github.io/elasticsearch-head/) a web front end for browsing and interacting with an Elastic Search cluster. +* [Fatt](https://github.com/0x4D31/fatt) a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic. * [Spiderfoot](https://github.com/smicallef/spiderfoot) a open source intelligence automation tool. * [Suricata](http://suricata-ids.org/) a Network Security Monitoring engine. @@ -137,7 +137,6 @@ In T-Pot we combine the dockerized honeypots ... * [cowrie](http://www.micheloosterhof.com/cowrie/), * [dionaea](https://github.com/DinoTools/dionaea), * [elasticpot](https://github.com/schmalle/ElasticPot), -* [glastopf](http://mushmush.org/), * [glutton](https://github.com/mushorg/glutton), * [heralding](https://github.com/johnnykv/heralding), * [honeypy](https://github.com/foospidy/HoneyPy), @@ -153,6 +152,7 @@ In T-Pot we combine the dockerized honeypots ... * [Cyberchef](https://gchq.github.io/CyberChef/) a web app for encryption, encoding, compression and data analysis. * [ELK stack](https://www.elastic.co/videos) to beautifully visualize all the events captured by T-Pot. * [Elasticsearch Head](https://mobz.github.io/elasticsearch-head/) a web front end for browsing and interacting with an Elastic Search cluster. +* [Fatt](https://github.com/0x4D31/fatt) a pyshark based script for extracting network metadata and fingerprints from pcap files and live network traffic. * [Spiderfoot](https://github.com/smicallef/spiderfoot) a open source intelligence automation tool. * [Suricata](http://suricata-ids.org/) a Network Security Monitoring engine. @@ -216,7 +216,7 @@ Depending on your installation type, whether you install on [real hardware](#har ##### NextGen Installation (Glutton replacing Honeytrap, HoneyPy replacing Elasticpot) - Honeypots: adbhoney, ciscoasa, conpot, cowrie, dionaea, glutton, heralding, honeypy, mailoney, rdpy, snare & tanner -- Tools: cockpit, cyberchef, ELK, elasticsearch head, ewsposter, NGINX, spiderfoot, p0f and suricata +- Tools: cockpit, cyberchef, ELK, elasticsearch head, ewsposter, fatt, NGINX, spiderfoot, p0f and suricata - 6-8 GB RAM (less RAM is possible but might introduce swapping) - 128 GB SSD (smaller is possible but limits the capacity of storing events) @@ -498,7 +498,7 @@ We hope you understand that we cannot provide support on an individual basis. We # Licenses The software that T-Pot is built on uses the following licenses.
GPLv2: [conpot](https://github.com/mushorg/conpot/blob/master/LICENSE.txt), [dionaea](https://github.com/DinoTools/dionaea/blob/master/LICENSE), [honeypy](https://github.com/foospidy/HoneyPy/blob/master/LICENSE), [honeytrap](https://github.com/armedpot/honeytrap/blob/master/LICENSE), [suricata](http://suricata-ids.org/about/open-source/) -
GPLv3: [adbhoney](https://github.com/huuck/ADBHoney), [elasticpot](https://github.com/schmalle/ElasticPot), [ewsposter](https://github.com/dtag-dev-sec/ews/), [glastopf](https://github.com/glastopf/glastopf/blob/master/GPL), [rdpy](https://github.com/citronneur/rdpy/blob/master/LICENSE), [heralding](https://github.com/johnnykv/heralding/blob/master/LICENSE.txt), [snare](https://github.com/mushorg/snare/blob/master/LICENSE), [tanner](https://github.com/mushorg/snare/blob/master/LICENSE) +
GPLv3: [adbhoney](https://github.com/huuck/ADBHoney), [elasticpot](https://github.com/schmalle/ElasticPot), [ewsposter](https://github.com/dtag-dev-sec/ews/), [fatt](https://github.com/0x4D31/fatt/blob/master/LICENSE), [rdpy](https://github.com/citronneur/rdpy/blob/master/LICENSE), [heralding](https://github.com/johnnykv/heralding/blob/master/LICENSE.txt), [snare](https://github.com/mushorg/snare/blob/master/LICENSE), [tanner](https://github.com/mushorg/snare/blob/master/LICENSE)
Apache 2 License: [cyberchef](https://github.com/gchq/CyberChef/blob/master/LICENSE), [elasticsearch](https://github.com/elasticsearch/elasticsearch/blob/master/LICENSE.txt), [logstash](https://github.com/elasticsearch/logstash/blob/master/LICENSE), [kibana](https://github.com/elasticsearch/kibana/blob/master/LICENSE.md), [docker](https://github.com/docker/docker/blob/master/LICENSE), [elasticsearch-head](https://github.com/mobz/elasticsearch-head/blob/master/LICENCE)
MIT license: [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/blob/master/LICENSE), [glutton](https://github.com/mushorg/glutton/blob/master/LICENSE)
Other: [cowrie](https://github.com/micheloosterhof/cowrie/blob/master/LICENSE.md), [mailoney](https://github.com/awhitehatter/mailoney), [Debian licensing](https://www.debian.org/legal/licenses/) @@ -522,7 +522,7 @@ Without open source and the fruitful development community (we are proud to be a * [elasticsearch](https://github.com/elastic/elasticsearch/graphs/contributors) * [elasticsearch-head](https://github.com/mobz/elasticsearch-head/graphs/contributors) * [ewsposter](https://github.com/armedpot/ewsposter/graphs/contributors) -* [glastopf](https://github.com/mushorg/glastopf/graphs/contributors) +* [fatt](https://github.com/0x4D31/fatt/graphs/contributors) * [glutton](https://github.com/mushorg/glutton/graphs/contributors) * [heralding](https://github.com/johnnykv/heralding/graphs/contributors) * [honeypy](https://github.com/foospidy/HoneyPy/graphs/contributors)