mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-05-13 11:48:09 +00:00
cleanup
This commit is contained in:
t3chn0m4g3
parent
21c68f75e2
commit
53e9470d58
10 changed files with 20 additions and 348 deletions
|
|
@ -1,70 +0,0 @@
|
||||||
FROM alpine
|
|
||||||
|
|
||||||
# Include dist
|
|
||||||
ADD dist/ /root/dist/
|
|
||||||
|
|
||||||
# Get and install dependencies & packages
|
|
||||||
RUN apk -U --no-cache add \
|
|
||||||
bash \
|
|
||||||
build-base \
|
|
||||||
git \
|
|
||||||
gmp-dev \
|
|
||||||
libcap \
|
|
||||||
libffi-dev \
|
|
||||||
mpc1-dev \
|
|
||||||
mpfr-dev \
|
|
||||||
openssl \
|
|
||||||
openssl-dev \
|
|
||||||
python \
|
|
||||||
python-dev \
|
|
||||||
py-bcrypt \
|
|
||||||
py-mysqldb \
|
|
||||||
py-pip \
|
|
||||||
py-requests \
|
|
||||||
py-setuptools && \
|
|
||||||
|
|
||||||
# Setup user
|
|
||||||
addgroup -g 2000 cowrie && \
|
|
||||||
adduser -S -s /bin/ash -u 2000 -D -g 2000 cowrie && \
|
|
||||||
|
|
||||||
# Install cowrie
|
|
||||||
mkdir -p /home/cowrie && \
|
|
||||||
cd /home/cowrie && \
|
|
||||||
git clone --depth=1 https://github.com/micheloosterhof/cowrie -b 1.5.3 && \
|
|
||||||
cd cowrie && \
|
|
||||||
mkdir -p log && \
|
|
||||||
pip install --upgrade pip && \
|
|
||||||
pip install --upgrade -r requirements.txt && \
|
|
||||||
|
|
||||||
# Setup configs
|
|
||||||
setcap cap_net_bind_service=+ep /usr/bin/python2.7 && \
|
|
||||||
cp /root/dist/cowrie.cfg /home/cowrie/cowrie/cowrie.cfg && \
|
|
||||||
chown cowrie:cowrie -R /home/cowrie/* /usr/lib/python2.7/site-packages/twisted/plugins && \
|
|
||||||
|
|
||||||
# Start Cowrie once to prevent dropin.cache errors upon container start caused by read-only filesystem
|
|
||||||
su - cowrie -c "export PYTHONPATH=/home/cowrie/cowrie:/home/cowrie/cowrie/src && \
|
|
||||||
cd /home/cowrie/cowrie && \
|
|
||||||
/usr/bin/twistd --uid=2000 --gid=2000 -y cowrie.tac --pidfile cowrie.pid cowrie &" && \
|
|
||||||
sleep 10 && \
|
|
||||||
|
|
||||||
# Clean up
|
|
||||||
apk del --purge build-base \
|
|
||||||
git \
|
|
||||||
gmp-dev \
|
|
||||||
libcap \
|
|
||||||
libffi-dev \
|
|
||||||
mpc1-dev \
|
|
||||||
mpfr-dev \
|
|
||||||
openssl-dev \
|
|
||||||
python-dev \
|
|
||||||
py-mysqldb \
|
|
||||||
py-pip && \
|
|
||||||
rm -rf /root/* && \
|
|
||||||
rm -rf /var/cache/apk/* && \
|
|
||||||
rm -rf /home/cowrie/cowrie/cowrie.pid
|
|
||||||
|
|
||||||
# Start cowrie
|
|
||||||
ENV PYTHONPATH /home/cowrie/cowrie:/home/cowrie/cowrie/src
|
|
||||||
WORKDIR /home/cowrie/cowrie
|
|
||||||
USER cowrie:cowrie
|
|
||||||
CMD ["/usr/bin/twistd", "--nodaemon", "-y", "cowrie.tac", "--pidfile", "/tmp/cowrie/cowrie.pid", "cowrie"]
|
|
||||||
|
|
@ -1,42 +0,0 @@
|
||||||
### This is only for testing purposes, do NOT use for production
|
|
||||||
FROM alpine:latest
|
|
||||||
#
|
|
||||||
ADD dist/ /root/dist/
|
|
||||||
#
|
|
||||||
# Install packages
|
|
||||||
RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
|
|
||||||
apk -U --no-cache add \
|
|
||||||
build-base \
|
|
||||||
coreutils \
|
|
||||||
git \
|
|
||||||
libffi \
|
|
||||||
libffi-dev \
|
|
||||||
py-gevent \
|
|
||||||
py-pip \
|
|
||||||
python \
|
|
||||||
python-dev \
|
|
||||||
sqlite && \
|
|
||||||
#
|
|
||||||
# Install php sandbox from git
|
|
||||||
git clone --depth=1 https://github.com/rep/hpfeeds /opt/hpfeeds && \
|
|
||||||
cd /opt/hpfeeds/broker && \
|
|
||||||
sed -i -e '87d;88d' database.py && \
|
|
||||||
cp /root/dist/adduser.sql . && \
|
|
||||||
cd /opt/hpfeeds/broker && timeout 5 python broker.py || : && \
|
|
||||||
sqlite3 db.sqlite3 < adduser.sql && \
|
|
||||||
#
|
|
||||||
#python setup.py build && \
|
|
||||||
#python setup.py install && \
|
|
||||||
#
|
|
||||||
# Clean up
|
|
||||||
apk del --purge autoconf \
|
|
||||||
build-base \
|
|
||||||
coreutils \
|
|
||||||
libffi-dev \
|
|
||||||
python-dev && \
|
|
||||||
rm -rf /root/* && \
|
|
||||||
rm -rf /var/cache/apk/*
|
|
||||||
#
|
|
||||||
# Set workdir and start glastopf
|
|
||||||
WORKDIR /opt/hpfeeds/broker
|
|
||||||
CMD python broker.py
|
|
||||||
|
|
@ -1,54 +0,0 @@
|
||||||
FROM alpine
|
|
||||||
#
|
|
||||||
# Include dist
|
|
||||||
ADD dist/ /root/dist/
|
|
||||||
#
|
|
||||||
# Setup apk
|
|
||||||
RUN apk -U --no-cache add \
|
|
||||||
build-base \
|
|
||||||
git \
|
|
||||||
go \
|
|
||||||
g++ \
|
|
||||||
iptables-dev \
|
|
||||||
libnetfilter_queue-dev \
|
|
||||||
libcap \
|
|
||||||
libpcap-dev && \
|
|
||||||
#
|
|
||||||
# Setup go, glutton
|
|
||||||
export GOPATH=/opt/go/ && \
|
|
||||||
go get -d github.com/mushorg/glutton && \
|
|
||||||
cd /opt/go/src/github.com/satori/ && \
|
|
||||||
rm -rf go.uuid && \
|
|
||||||
git clone https://github.com/satori/go.uuid && \
|
|
||||||
cd go.uuid && \
|
|
||||||
git checkout v1.2.0 && \
|
|
||||||
mv /root/dist/system.go /opt/go/src/github.com/mushorg/glutton/ && \
|
|
||||||
cd /opt/go/src/github.com/mushorg/glutton/ && \
|
|
||||||
make build && \
|
|
||||||
cd / && \
|
|
||||||
mkdir -p /opt/glutton && \
|
|
||||||
mv /opt/go/src/github.com/mushorg/glutton/bin /opt/glutton/ && \
|
|
||||||
mv /opt/go/src/github.com/mushorg/glutton/config /opt/glutton/ && \
|
|
||||||
mv /opt/go/src/github.com/mushorg/glutton/rules /opt/glutton/ && \
|
|
||||||
setcap cap_net_admin,cap_net_raw=+ep /opt/glutton/bin/server && \
|
|
||||||
setcap cap_net_admin,cap_net_raw=+ep /sbin/xtables-multi && \
|
|
||||||
#
|
|
||||||
# Setup user, groups and configs
|
|
||||||
addgroup -g 2000 glutton && \
|
|
||||||
adduser -S -s /bin/ash -u 2000 -D -g 2000 glutton && \
|
|
||||||
mkdir -p /var/log/glutton && \
|
|
||||||
mv /root/dist/rules.yaml /opt/glutton/rules/ && \
|
|
||||||
#
|
|
||||||
# Clean up
|
|
||||||
apk del --purge build-base \
|
|
||||||
git \
|
|
||||||
go \
|
|
||||||
g++ && \
|
|
||||||
rm -rf /var/cache/apk/* \
|
|
||||||
/opt/go \
|
|
||||||
/root/dist
|
|
||||||
#
|
|
||||||
# Start glutton
|
|
||||||
WORKDIR /opt/glutton
|
|
||||||
USER glutton:glutton
|
|
||||||
CMD exec bin/server -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:]) -l /var/log/glutton/glutton.log > /dev/null 2>&1
|
|
||||||
|
|
@ -1,54 +0,0 @@
|
||||||
FROM alpine
|
|
||||||
|
|
||||||
# Include dist
|
|
||||||
ADD dist/ /root/dist/
|
|
||||||
|
|
||||||
# Install packages
|
|
||||||
RUN apk -U --no-cache add \
|
|
||||||
build-base \
|
|
||||||
git \
|
|
||||||
libcap \
|
|
||||||
libffi-dev \
|
|
||||||
openssl-dev \
|
|
||||||
libzmq \
|
|
||||||
postgresql-dev \
|
|
||||||
python3 \
|
|
||||||
python3-dev \
|
|
||||||
py-virtualenv && \
|
|
||||||
pip3 install --no-cache-dir --upgrade pip && \
|
|
||||||
|
|
||||||
# Setup heralding
|
|
||||||
mkdir -p /opt && \
|
|
||||||
cd /opt/ && \
|
|
||||||
git clone --depth=1 https://github.com/johnnykv/heralding && \
|
|
||||||
cd heralding && \
|
|
||||||
pip3 install --no-cache-dir -r requirements.txt && \
|
|
||||||
pip3 install --no-cache-dir . && \
|
|
||||||
|
|
||||||
# Setup user, groups and configs
|
|
||||||
addgroup -g 2000 heralding && \
|
|
||||||
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 heralding && \
|
|
||||||
mkdir -p /var/log/heralding/ /etc/heralding && \
|
|
||||||
mv /root/dist/heralding.yml /etc/heralding/ && \
|
|
||||||
setcap cap_net_bind_service=+ep /usr/bin/python3.6 && \
|
|
||||||
chown -R heralding:heralding /var/log/heralding && \
|
|
||||||
|
|
||||||
# Clean up
|
|
||||||
apk del --purge \
|
|
||||||
build-base \
|
|
||||||
git \
|
|
||||||
libcap \
|
|
||||||
libffi-dev \
|
|
||||||
libressl-dev \
|
|
||||||
postgresql-dev \
|
|
||||||
python3-dev \
|
|
||||||
py-virtualenv && \
|
|
||||||
rm -rf /root/* \
|
|
||||||
/var/cache/apk/* \
|
|
||||||
/opt/heralding
|
|
||||||
|
|
||||||
# Start elasticpot
|
|
||||||
STOPSIGNAL SIGINT
|
|
||||||
WORKDIR /tmp/heralding/
|
|
||||||
USER heralding:heralding
|
|
||||||
CMD exec heralding -c /etc/heralding/heralding.yml -l /var/log/heralding/heralding.log
|
|
||||||
|
|
@ -1,52 +0,0 @@
|
||||||
FROM alpine
|
|
||||||
#
|
|
||||||
# Install packages
|
|
||||||
RUN apk -U --no-cache add \
|
|
||||||
autoconf \
|
|
||||||
automake \
|
|
||||||
build-base \
|
|
||||||
git \
|
|
||||||
libcap \
|
|
||||||
libtool \
|
|
||||||
py-pip \
|
|
||||||
python \
|
|
||||||
python-dev && \
|
|
||||||
#
|
|
||||||
# Install libemu
|
|
||||||
git clone --depth=1 https://github.com/buffer/libemu /root/libemu/ && \
|
|
||||||
cd /root/libemu/ && \
|
|
||||||
autoreconf -vi && \
|
|
||||||
./configure && \
|
|
||||||
make && \
|
|
||||||
make install && \
|
|
||||||
#
|
|
||||||
# Install libemu python wrapper
|
|
||||||
pip install --no-cache-dir --upgrade pip && \
|
|
||||||
pip install --no-cache-dir \
|
|
||||||
hpfeeds \
|
|
||||||
pylibemu && \
|
|
||||||
#
|
|
||||||
# Install mailoney from git
|
|
||||||
git clone --depth=1 https://github.com/awhitehatter/mailoney /opt/mailoney && \
|
|
||||||
#
|
|
||||||
# Setup user, groups and configs
|
|
||||||
addgroup -g 2000 mailoney && \
|
|
||||||
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 mailoney && \
|
|
||||||
chown -R mailoney:mailoney /opt/mailoney && \
|
|
||||||
setcap cap_net_bind_service=+ep /usr/bin/python2.7 && \
|
|
||||||
#
|
|
||||||
# Clean up
|
|
||||||
apk del --purge autoconf \
|
|
||||||
automake \
|
|
||||||
build-base \
|
|
||||||
git \
|
|
||||||
py-pip \
|
|
||||||
python-dev && \
|
|
||||||
rm -rf /root/* && \
|
|
||||||
rm -rf /var/cache/apk/*
|
|
||||||
#
|
|
||||||
# Set workdir and start mailoney
|
|
||||||
STOPSIGNAL SIGINT
|
|
||||||
USER mailoney:mailoney
|
|
||||||
WORKDIR /opt/mailoney/
|
|
||||||
CMD ["/usr/bin/python","mailoney.py","-i","0.0.0.0","-p","25","-s","mailrelay.local","-t","schizo_open_relay"]
|
|
||||||
|
|
@ -1,56 +0,0 @@
|
||||||
FROM alpine:latest
|
|
||||||
#
|
|
||||||
# Get and install dependencies & packages
|
|
||||||
RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
|
|
||||||
apk -U --no-cache add \
|
|
||||||
build-base \
|
|
||||||
curl \
|
|
||||||
git \
|
|
||||||
libffi-dev \
|
|
||||||
libxml2 \
|
|
||||||
libxml2-dev \
|
|
||||||
libxslt \
|
|
||||||
libxslt-dev \
|
|
||||||
openssl \
|
|
||||||
openssl-dev \
|
|
||||||
python \
|
|
||||||
python-dev \
|
|
||||||
py-cffi \
|
|
||||||
py-pillow \
|
|
||||||
py-future \
|
|
||||||
py-pip \
|
|
||||||
swig && \
|
|
||||||
#
|
|
||||||
# Setup user
|
|
||||||
addgroup -g 2000 spiderfoot && \
|
|
||||||
adduser -S -s /bin/ash -u 2000 -D -g 2000 spiderfoot && \
|
|
||||||
#
|
|
||||||
# Install spiderfoot
|
|
||||||
# git clone --depth=1 https://github.com/smicallef/spiderfoot -b v2.12.0-final /home/spiderfoot && \
|
|
||||||
git clone --depth=1 https://github.com/smicallef/spiderfoot /home/spiderfoot && \
|
|
||||||
cd /home/spiderfoot && \
|
|
||||||
pip install --no-cache-dir openxmllib wheel && \
|
|
||||||
pip install --no-cache-dir -r requirements.txt && \
|
|
||||||
chown -R spiderfoot:spiderfoot /home/spiderfoot && \
|
|
||||||
sed -i "s#'__docroot': ''#'__docroot': '\/spiderfoot'#" /home/spiderfoot/sf.py && \
|
|
||||||
sed -i 's#raise cherrypy.HTTPRedirect("\/")#raise cherrypy.HTTPRedirect("\/spiderfoot")#' /home/spiderfoot/sfwebui.py && \
|
|
||||||
#
|
|
||||||
# Clean up
|
|
||||||
apk del --purge build-base \
|
|
||||||
git \
|
|
||||||
libffi-dev \
|
|
||||||
libxml2-dev \
|
|
||||||
libxslt-dev \
|
|
||||||
openssl-dev \
|
|
||||||
python-dev \
|
|
||||||
py-pip \
|
|
||||||
py-setuptools && \
|
|
||||||
rm -rf /var/cache/apk/*
|
|
||||||
#
|
|
||||||
# Healthcheck
|
|
||||||
HEALTHCHECK --retries=10 CMD curl -s -XGET 'http://127.0.0.1:8080'
|
|
||||||
#
|
|
||||||
# Set user, workdir and start spiderfoot
|
|
||||||
USER spiderfoot:spiderfoot
|
|
||||||
WORKDIR /home/spiderfoot
|
|
||||||
CMD ["/usr/bin/python", "sf.py", "0.0.0.0:8080"]
|
|
||||||
|
|
@ -49,23 +49,23 @@ services:
|
||||||
- tanner_redis
|
- tanner_redis
|
||||||
|
|
||||||
# Tanner WEB Service
|
# Tanner WEB Service
|
||||||
tanner_web:
|
# tanner_web:
|
||||||
build: ./tanner
|
# build: ./tanner
|
||||||
container_name: tanner_web
|
# container_name: tanner_web
|
||||||
restart: always
|
# restart: always
|
||||||
stop_signal: SIGKILL
|
# stop_signal: SIGKILL
|
||||||
tmpfs:
|
# tmpfs:
|
||||||
- /tmp/tanner:uid=2000,gid=2000
|
# - /tmp/tanner:uid=2000,gid=2000
|
||||||
tty: true
|
# tty: true
|
||||||
networks:
|
# networks:
|
||||||
- tanner_local
|
# - tanner_local
|
||||||
image: "dtagdevsec/tanner:2006"
|
# image: "dtagdevsec/tanner:2006"
|
||||||
command: tannerweb
|
# command: tannerweb
|
||||||
read_only: true
|
# read_only: true
|
||||||
volumes:
|
# volumes:
|
||||||
- /data/tanner/log:/var/log/tanner
|
# - /data/tanner/log:/var/log/tanner
|
||||||
depends_on:
|
# depends_on:
|
||||||
- tanner_redis
|
# - tanner_redis
|
||||||
|
|
||||||
# Tanner Service
|
# Tanner Service
|
||||||
tanner:
|
tanner:
|
||||||
|
|
@ -86,7 +86,7 @@ services:
|
||||||
- /data/tanner/files:/opt/tanner/files
|
- /data/tanner/files:/opt/tanner/files
|
||||||
depends_on:
|
depends_on:
|
||||||
- tanner_api
|
- tanner_api
|
||||||
- tanner_web
|
# - tanner_web
|
||||||
- tanner_phpox
|
- tanner_phpox
|
||||||
|
|
||||||
# Snare Service
|
# Snare Service
|
||||||
|
|
|
||||||
|
|
@ -13,7 +13,7 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
|
||||||
rm -rf /tmp/* /var/tmp/* && \
|
rm -rf /tmp/* /var/tmp/* && \
|
||||||
rm -rf /var/cache/apk/*
|
rm -rf /var/cache/apk/*
|
||||||
#
|
#
|
||||||
# Start conpot
|
# Start redis
|
||||||
STOPSIGNAL SIGKILL
|
STOPSIGNAL SIGKILL
|
||||||
USER nobody:nobody
|
USER nobody:nobody
|
||||||
CMD redis-server /etc/redis.conf
|
CMD redis-server /etc/redis.conf
|
||||||
|
|
|
||||||
|
|
@ -56,7 +56,7 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
|
||||||
rm -rf /tmp/* /var/tmp/* && \
|
rm -rf /tmp/* /var/tmp/* && \
|
||||||
rm -rf /var/cache/apk/*
|
rm -rf /var/cache/apk/*
|
||||||
#
|
#
|
||||||
# Start conpot
|
# Start tanner
|
||||||
STOPSIGNAL SIGKILL
|
STOPSIGNAL SIGKILL
|
||||||
USER tanner:tanner
|
USER tanner:tanner
|
||||||
WORKDIR /opt/tanner
|
WORKDIR /opt/tanner
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue