From 8b4a233b7a9ce521ab74fa1c1fb6f8e77895a391 Mon Sep 17 00:00:00 2001 From: t3chn0m4g3 Date: Sun, 9 Sep 2018 18:38:47 +0000 Subject: [PATCH] prepare installer for medpot --- bin/clean.sh | 9 +++++++++ etc/compose/experimental.yml | 14 ++++++++++++++ etc/compose/industrial.yml | 14 ++++++++++++++ etc/compose/sensor.yml | 14 ++++++++++++++ etc/compose/standard.yml | 14 ++++++++++++++ etc/logrotate/logrotate.conf | 1 + iso/installer/install.sh | 1 + 7 files changed, 67 insertions(+) diff --git a/bin/clean.sh b/bin/clean.sh index 5f4b2c49..ff31a9a5 100755 --- a/bin/clean.sh +++ b/bin/clean.sh @@ -167,6 +167,14 @@ fuMAILONEY () { chown tpot:tpot /data/mailoney/ -R } +# Let's create a function to clean up and prepare mailoney data +fuMEDPOT () { + if [ "$myPERSISTENCE" != "on" ]; then rm -rf /data/medpot/*; fi + mkdir -p /data/medpot/log/ + chmod 760 /data/medpot/ -R + chown tpot:tpot /data/medpot/ -R +} + # Let's create a function to clean up nginx logs fuNGINX () { if [ "$myPERSISTENCE" != "on" ]; then rm -rf /data/nginx/log/*; fi @@ -257,6 +265,7 @@ if [ "$myPERSISTENCE" = "on" ]; fuHERALDING fuHONEYTRAP fuMAILONEY + fuMEDPOT fuNGINX fuRDPY fuSPIDERFOOT diff --git a/etc/compose/experimental.yml b/etc/compose/experimental.yml index a277fb8a..3e338dd6 100644 --- a/etc/compose/experimental.yml +++ b/etc/compose/experimental.yml @@ -12,6 +12,7 @@ networks: elasticpot_local: heralding_local: mailoney_local: + medpot_local: rdpy_local: tanner_local: vnclowpot_local: @@ -264,6 +265,19 @@ services: volumes: - /data/mailoney/log:/opt/mailoney/logs +# Medpot service + medpot: + container_name: medpot + restart: always + networks: + - medpot_local + ports: + - "2575:2575" + image: "dtagdevsec/medpot:1804" + read_only: true + volumes: + - /data/medpot/log/:/var/log/ + # Rdpy service rdpy: container_name: rdpy diff --git a/etc/compose/industrial.yml b/etc/compose/industrial.yml index 6fcf7503..ad8d7972 100644 --- a/etc/compose/industrial.yml +++ b/etc/compose/industrial.yml @@ -10,6 +10,7 @@ networks: conpot_local_kamstrup_382: cowrie_local: cyberchef_local: + medpot_local: rdpy_local: vnclowpot_local: ewsposter_local: @@ -178,6 +179,19 @@ services: - /data/honeytrap/downloads:/opt/honeytrap/var/downloads - /data/honeytrap/log:/opt/honeytrap/var/log +# Medpot service + medpot: + container_name: medpot + restart: always + networks: + - medpot_local + ports: + - "2575:2575" + image: "dtagdevsec/medpot:1804" + read_only: true + volumes: + - /data/medpot/log/:/var/log/ + # Rdpy service rdpy: container_name: rdpy diff --git a/etc/compose/sensor.yml b/etc/compose/sensor.yml index fce5d8cb..ee8377a6 100644 --- a/etc/compose/sensor.yml +++ b/etc/compose/sensor.yml @@ -11,6 +11,7 @@ networks: elasticpot_local: heralding_local: mailoney_local: + medpot_local: rdpy_local: tanner_local: vnclowpot_local: @@ -262,6 +263,19 @@ services: volumes: - /data/mailoney/log:/opt/mailoney/logs +# Medpot service + medpot: + container_name: medpot + restart: always + networks: + - medpot_local + ports: + - "2575:2575" + image: "dtagdevsec/medpot:1804" + read_only: true + volumes: + - /data/medpot/log/:/var/log/ + # Rdpy service rdpy: container_name: rdpy diff --git a/etc/compose/standard.yml b/etc/compose/standard.yml index 8a3fdb13..cc55e817 100644 --- a/etc/compose/standard.yml +++ b/etc/compose/standard.yml @@ -12,6 +12,7 @@ networks: elasticpot_local: heralding_local: mailoney_local: + medpot_local: rdpy_local: tanner_local: vnclowpot_local: @@ -263,6 +264,19 @@ services: volumes: - /data/mailoney/log:/opt/mailoney/logs +# Medpot service + medpot: + container_name: medpot + restart: always + networks: + - medpot_local + ports: + - "2575:2575" + image: "dtagdevsec/medpot:1804" + read_only: true + volumes: + - /data/medpot/log/:/var/log/ + # Rdpy service rdpy: container_name: rdpy diff --git a/etc/logrotate/logrotate.conf b/etc/logrotate/logrotate.conf index 28cfb27c..5657efc9 100644 --- a/etc/logrotate/logrotate.conf +++ b/etc/logrotate/logrotate.conf @@ -26,6 +26,7 @@ /data/honeytrap/attacks.tgz /data/honeytrap/downloads.tgz /data/mailoney/log/commands.log +/data/medpot/log/*.log /data/nginx/log/*.log /data/p0f/log/p0f.json /data/rdpy/log/rdpy.log diff --git a/iso/installer/install.sh b/iso/installer/install.sh index c46ae39a..3827e74c 100755 --- a/iso/installer/install.sh +++ b/iso/installer/install.sh @@ -698,6 +698,7 @@ mkdir -p /data/ciscoasa/log \ /data/glutton/log \ /data/heralding/log \ /data/mailoney/log \ + /data/medpot/log \ /data/nginx/log \ /data/emobility/log \ /data/ews/conf \