Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-28 19:28:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

upstart changes dionaea, honeytrap

Browse source
This commit is contained in:
Marco Ochse 2016-01-27 10:46:01 +01:00
parent 3f51fe8d67
commit 403e57c6d4
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
installer/upstart/dionaea.conf
View file

@ -2,7 +2,7 @@
# T-Pot # # T-Pot #
# Dionaea upstart script # # Dionaea upstart script #
# # # #
# v16.03.2 by mo, DTAG, 2015-12-14 # # v16.03.3 by mo, DTAG, 2016-01-27 #
######################################################## ########################################################
description "Dionaea" description "Dionaea"
@ -23,7 +23,7 @@ pre-start script
chown tpot:tpot /data/dionaea -R chown tpot:tpot /data/dionaea -R
end script end script
script script
/usr/bin/docker run --name dionaea --cap-add=NET_BIND_SERVICE --rm=true -p 21:21 -p 42:42 -p 8080:80 -p 135:135 -p 443:443 -p 445:445 -p 1433:1433 -p 3306:3306 -p 5061:5061 -p 5060:5060 -p 69:69/udp -p 5060:5060/udp -v /data/dionaea:/data/dionaea -v /data/ews:/data/ews dtagdevsec/dionaea:latest1603 /usr/bin/docker run --name dionaea --cap-add=NET_BIND_SERVICE --rm=true -p 21:21 -p 42:42 -p 8081:80 -p 135:135 -p 443:443 -p 445:445 -p 1433:1433 -p 3306:3306 -p 5061:5061 -p 5060:5060 -p 69:69/udp -p 5060:5060/udp -v /data/dionaea:/data/dionaea -v /data/ews:/data/ews dtagdevsec/dionaea:latest1603
end script end script
post-start script post-start script
# Delay next start to avoid rapid respawning # Delay next start to avoid rapid respawning

6
installer/upstart/honeytrap.conf
View file

@ -2,7 +2,7 @@
# T-Pot # # T-Pot #
# Honeytrap upstart script # # Honeytrap upstart script #
# # # #
# v16.03.3 by mo, DTAG, 2016-01-15 # # v16.03.4 by mo, DTAG, 2016-01-27 #
######################################################## ########################################################
description "Honeytrap" description "Honeytrap"
@ -21,7 +21,7 @@ pre-start script
mkdir -p /data/honeytrap/log/ /data/honeytrap/attacks/ /data/honeytrap/downloads/ mkdir -p /data/honeytrap/log/ /data/honeytrap/attacks/ /data/honeytrap/downloads/
chmod 760 /data/honeytrap/ -R chmod 760 /data/honeytrap/ -R
chown tpot:tpot /data/honeytrap/ -R chown tpot:tpot /data/honeytrap/ -R
/sbin/iptables -w -A INPUT -p tcp --syn -m state --state NEW -m multiport ! --dports 21,22,42,80,135,443,445,1433,3306,5060,5061,9200,64295,64296 -j NFQUEUE /sbin/iptables -w -A INPUT -p tcp --syn -m state --state NEW -m multiport ! --dports 21,22,42,80,135,443,445,1433,3306,5060,5061,8081,9200,64295,64296 -j NFQUEUE
end script end script
script script
/usr/bin/docker run --name honeytrap --cap-add=NET_ADMIN --net=host --rm=true -v /data/honeytrap:/data/honeytrap -v /data/ews:/data/ews dtagdevsec/honeytrap:latest1603 /usr/bin/docker run --name honeytrap --cap-add=NET_ADMIN --net=host --rm=true -v /data/honeytrap:/data/honeytrap -v /data/ews:/data/ews dtagdevsec/honeytrap:latest1603
@ -31,5 +31,5 @@ post-start script
sleep $(((RANDOM % 5)+5)) sleep $(((RANDOM % 5)+5))
end script end script
post-stop script post-stop script
/sbin/iptables -w -D INPUT -p tcp --syn -m state --state NEW -m multiport ! --dports 21,22,42,80,135,443,445,1433,3306,5060,5061,9200,64295,64296 -j NFQUEUE /sbin/iptables -w -D INPUT -p tcp --syn -m state --state NEW -m multiport ! --dports 21,22,42,80,135,443,445,1433,3306,5060,5061,8081,9200,64295,64296 -j NFQUEUE
end script end script