mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-01 20:42:11 +00:00
prepare for new release
fix for installer, now always pointing to master repo include adbhoney and dashboard
This commit is contained in:
parent
c7873554c3
commit
9f905f70de
14 changed files with 3459 additions and 3184 deletions
16
README.md
16
README.md
|
@ -6,6 +6,7 @@ T-Pot 18.11 runs on the latest 18.04.x LTS Ubuntu Server Network Installer image
|
||||||
|
|
||||||
and includes dockerized versions of the following honeypots
|
and includes dockerized versions of the following honeypots
|
||||||
|
|
||||||
|
* [adbhoney](https://github.com/huuck/ADBHoney),
|
||||||
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot),
|
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot),
|
||||||
* [conpot](http://conpot.org/),
|
* [conpot](http://conpot.org/),
|
||||||
* [cowrie](http://www.micheloosterhof.com/cowrie/),
|
* [cowrie](http://www.micheloosterhof.com/cowrie/),
|
||||||
|
@ -71,6 +72,7 @@ Furthermore we use the following tools
|
||||||
<a name="changelog"></a>
|
<a name="changelog"></a>
|
||||||
# Changelog
|
# Changelog
|
||||||
- **New honeypots**
|
- **New honeypots**
|
||||||
|
- *Adbhoney* Low interaction honeypot designed for Android Debug Bridge over TCP/IP.
|
||||||
- *Ciscoasa* a low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
|
- *Ciscoasa* a low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.
|
||||||
- *Glutton* (NextGen) is the all eating honeypot
|
- *Glutton* (NextGen) is the all eating honeypot
|
||||||
- *Heralding* a credentials catching honeypot.
|
- *Heralding* a credentials catching honeypot.
|
||||||
|
@ -121,6 +123,7 @@ The honeypot daemons as well as other support components being used have been co
|
||||||
This allows us to run multiple honeypot daemons on the same network interface while maintaining a small footprint and constrain each honeypot within its own environment.
|
This allows us to run multiple honeypot daemons on the same network interface while maintaining a small footprint and constrain each honeypot within its own environment.
|
||||||
|
|
||||||
In T-Pot we combine the dockerized honeypots ...
|
In T-Pot we combine the dockerized honeypots ...
|
||||||
|
* [adbhoney](https://github.com/huuck/ADBHoney),
|
||||||
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot),
|
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot),
|
||||||
* [conpot](http://conpot.org/),
|
* [conpot](http://conpot.org/),
|
||||||
* [cowrie](http://www.micheloosterhof.com/cowrie/),
|
* [cowrie](http://www.micheloosterhof.com/cowrie/),
|
||||||
|
@ -166,8 +169,8 @@ The individual docker configurations are located in the [docker folder](https://
|
||||||
# System Requirements
|
# System Requirements
|
||||||
Depending on your installation type, whether you install on [real hardware](#hardware) or in a [virtual machine](#vm), make sure your designated T-Pot system meets the following requirements:
|
Depending on your installation type, whether you install on [real hardware](#hardware) or in a [virtual machine](#vm), make sure your designated T-Pot system meets the following requirements:
|
||||||
|
|
||||||
##### T-Pot Standard Installation
|
##### Standard Installation
|
||||||
- Honeypots: ciscoasa, conpot, cowrie, dionaea, elasticpot, heralding, honeytrap, mailoney, rdpy, snare, tanner and vnclowpot
|
- Honeypots: adbhoney, ciscoasa, conpot, cowrie, dionaea, elasticpot, heralding, honeytrap, mailoney, rdpy, snare, tanner and vnclowpot
|
||||||
- Tools: cockpit, cyberchef, ELK, elasticsearch head, ewsposter, NGINX, spiderfoot, p0f and suricata
|
- Tools: cockpit, cyberchef, ELK, elasticsearch head, ewsposter, NGINX, spiderfoot, p0f and suricata
|
||||||
|
|
||||||
- 6-8 GB RAM (less RAM is possible but might introduce swapping)
|
- 6-8 GB RAM (less RAM is possible but might introduce swapping)
|
||||||
|
@ -176,7 +179,7 @@ Depending on your installation type, whether you install on [real hardware](#har
|
||||||
- A working, non-proxied, internet connection
|
- A working, non-proxied, internet connection
|
||||||
|
|
||||||
##### Sensor Installation
|
##### Sensor Installation
|
||||||
- Honeypots: ciscoasa, conpot, cowrie, dionaea, elasticpot, heralding, honeytrap, mailoney, rdpy, snare, tanner and vnclowpot
|
- Honeypots: adbhoney, ciscoasa, conpot, cowrie, dionaea, elasticpot, heralding, honeytrap, mailoney, rdpy, snare, tanner and vnclowpot
|
||||||
- Tools: cockpit
|
- Tools: cockpit
|
||||||
|
|
||||||
- 6-8 GB RAM (less RAM is possible but might introduce swapping)
|
- 6-8 GB RAM (less RAM is possible but might introduce swapping)
|
||||||
|
@ -203,7 +206,7 @@ Depending on your installation type, whether you install on [real hardware](#har
|
||||||
- A working, non-proxied, internet connection
|
- A working, non-proxied, internet connection
|
||||||
|
|
||||||
##### NextGen Installation (Glutton instead of Honeytrap)
|
##### NextGen Installation (Glutton instead of Honeytrap)
|
||||||
- Honeypots: ciscoasa, conpot, cowrie, dionaea, elasticpot, glutton, heralding, mailoney, rdpy, snare, tanner and vnclowpot
|
- Honeypots: adbhoney, ciscoasa, conpot, cowrie, dionaea, elasticpot, glutton, heralding, mailoney, rdpy, snare, tanner and vnclowpot
|
||||||
- Tools: cockpit, cyberchef, ELK, elasticsearch head, ewsposter, NGINX, spiderfoot, p0f and suricata
|
- Tools: cockpit, cyberchef, ELK, elasticsearch head, ewsposter, NGINX, spiderfoot, p0f and suricata
|
||||||
|
|
||||||
- 6-8 GB RAM (less RAM is possible but might introduce swapping)
|
- 6-8 GB RAM (less RAM is possible but might introduce swapping)
|
||||||
|
@ -477,7 +480,7 @@ We hope you understand that we cannot provide support on an individual basis. We
|
||||||
# Licenses
|
# Licenses
|
||||||
The software that T-Pot is built on uses the following licenses.
|
The software that T-Pot is built on uses the following licenses.
|
||||||
<br>GPLv2: [conpot)](https://github.com/mushorg/conpot/blob/master/LICENSE.txt), [dionaea](https://github.com/DinoTools/dionaea/blob/master/LICENSE), [honeytrap](https://github.com/armedpot/honeytrap/blob/master/LICENSE), [suricata](http://suricata-ids.org/about/open-source/)
|
<br>GPLv2: [conpot)](https://github.com/mushorg/conpot/blob/master/LICENSE.txt), [dionaea](https://github.com/DinoTools/dionaea/blob/master/LICENSE), [honeytrap](https://github.com/armedpot/honeytrap/blob/master/LICENSE), [suricata](http://suricata-ids.org/about/open-source/)
|
||||||
<br>GPLv3: [elasticpot](https://github.com/schmalle/ElasticPot), [ewsposter](https://github.com/dtag-dev-sec/ews/), [glastopf](https://github.com/glastopf/glastopf/blob/master/GPL), [rdpy](https://github.com/citronneur/rdpy/blob/master/LICENSE), [heralding](https://github.com/johnnykv/heralding/blob/master/LICENSE.txt), [snare](https://github.com/mushorg/snare/blob/master/LICENSE), [tanner](https://github.com/mushorg/snare/blob/master/LICENSE)
|
<br>GPLv3: [adbhoney](https://github.com/huuck/ADBHoney), [elasticpot](https://github.com/schmalle/ElasticPot), [ewsposter](https://github.com/dtag-dev-sec/ews/), [glastopf](https://github.com/glastopf/glastopf/blob/master/GPL), [rdpy](https://github.com/citronneur/rdpy/blob/master/LICENSE), [heralding](https://github.com/johnnykv/heralding/blob/master/LICENSE.txt), [snare](https://github.com/mushorg/snare/blob/master/LICENSE), [tanner](https://github.com/mushorg/snare/blob/master/LICENSE)
|
||||||
<br>Apache 2 License: [cyberchef](https://github.com/gchq/CyberChef/blob/master/LICENSE), [elasticsearch](https://github.com/elasticsearch/elasticsearch/blob/master/LICENSE.txt), [logstash](https://github.com/elasticsearch/logstash/blob/master/LICENSE), [kibana](https://github.com/elasticsearch/kibana/blob/master/LICENSE.md), [docker](https://github.com/docker/docker/blob/master/LICENSE), [elasticsearch-head](https://github.com/mobz/elasticsearch-head/blob/master/LICENCE)
|
<br>Apache 2 License: [cyberchef](https://github.com/gchq/CyberChef/blob/master/LICENSE), [elasticsearch](https://github.com/elasticsearch/elasticsearch/blob/master/LICENSE.txt), [logstash](https://github.com/elasticsearch/logstash/blob/master/LICENSE), [kibana](https://github.com/elasticsearch/kibana/blob/master/LICENSE.md), [docker](https://github.com/docker/docker/blob/master/LICENSE), [elasticsearch-head](https://github.com/mobz/elasticsearch-head/blob/master/LICENCE)
|
||||||
<br>MIT license: [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/blob/master/LICENSE), [ctop](https://github.com/bcicen/ctop/blob/master/LICENSE), [glutton](https://github.com/mushorg/glutton/blob/master/LICENSE)
|
<br>MIT license: [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/blob/master/LICENSE), [ctop](https://github.com/bcicen/ctop/blob/master/LICENSE), [glutton](https://github.com/mushorg/glutton/blob/master/LICENSE)
|
||||||
<br> Other: [cowrie](https://github.com/micheloosterhof/cowrie/blob/master/LICENSE.md), [mailoney](https://github.com/awhitehatter/mailoney), [Ubuntu licensing](http://www.ubuntu.com/about/about-ubuntu/licensing)
|
<br> Other: [cowrie](https://github.com/micheloosterhof/cowrie/blob/master/LICENSE.md), [mailoney](https://github.com/awhitehatter/mailoney), [Ubuntu licensing](http://www.ubuntu.com/about/about-ubuntu/licensing)
|
||||||
|
@ -488,6 +491,7 @@ Without open source and the fruitful development community we are proud to be a
|
||||||
|
|
||||||
### The developers and development communities of
|
### The developers and development communities of
|
||||||
|
|
||||||
|
* [adbhoney](https://github.com/huuck/ADBHoney/graphs/contributors)
|
||||||
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/graphs/contributors)
|
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/graphs/contributors)
|
||||||
* [cockpit](https://github.com/cockpit-project/cockpit/graphs/contributors)
|
* [cockpit](https://github.com/cockpit-project/cockpit/graphs/contributors)
|
||||||
* [conpot](https://github.com/mushorg/conpot/graphs/contributors)
|
* [conpot](https://github.com/mushorg/conpot/graphs/contributors)
|
||||||
|
@ -530,4 +534,4 @@ We will be releasing a new version of T-Pot about every 6-12 months.
|
||||||
<a name="funfact"></a>
|
<a name="funfact"></a>
|
||||||
# Fun Fact
|
# Fun Fact
|
||||||
|
|
||||||
In an effort of saving the environment we are now brewing our own Mate Ice Tea and consumed 235 liters so far for the T-Pot 18.11 development 😇
|
In an effort of saving the environment we are now brewing our own Mate Ice Tea and consumed 241 liters so far for the T-Pot 18.11 development 😇
|
||||||
|
|
BIN
docker/.DS_Store
vendored
BIN
docker/.DS_Store
vendored
Binary file not shown.
BIN
docker/dionaea/.DS_Store
vendored
BIN
docker/dionaea/.DS_Store
vendored
Binary file not shown.
BIN
docker/glutton/.DS_Store
vendored
BIN
docker/glutton/.DS_Store
vendored
Binary file not shown.
BIN
docker/medpot/.DS_Store
vendored
BIN
docker/medpot/.DS_Store
vendored
Binary file not shown.
BIN
docker/rdpy/.DS_Store
vendored
BIN
docker/rdpy/.DS_Store
vendored
Binary file not shown.
BIN
docker/suricata/.DS_Store
vendored
BIN
docker/suricata/.DS_Store
vendored
Binary file not shown.
BIN
docker/tanner/.DS_Store
vendored
BIN
docker/tanner/.DS_Store
vendored
Binary file not shown.
|
@ -3,6 +3,7 @@
|
||||||
version: '2.3'
|
version: '2.3'
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
|
adbhoney_local:
|
||||||
conpot_local_IEC104:
|
conpot_local_IEC104:
|
||||||
conpot_local_guardian_ast:
|
conpot_local_guardian_ast:
|
||||||
conpot_local_ipmi:
|
conpot_local_ipmi:
|
||||||
|
@ -23,6 +24,20 @@ services:
|
||||||
#### Honeypots
|
#### Honeypots
|
||||||
##################
|
##################
|
||||||
|
|
||||||
|
# Adbhoney service
|
||||||
|
adbhoney:
|
||||||
|
container_name: adbhoney
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
- adbhoney_local
|
||||||
|
ports:
|
||||||
|
- "5555:5555"
|
||||||
|
image: "dtagdevsec/adbhoney:1811"
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- /data/adbhoney/log:/opt/adbhoney/log
|
||||||
|
- /data/adbhoney/downloads:/opt/adbhoney/dl
|
||||||
|
|
||||||
# Ciscoasa service
|
# Ciscoasa service
|
||||||
ciscoasa:
|
ciscoasa:
|
||||||
container_name: ciscoasa
|
container_name: ciscoasa
|
||||||
|
|
|
@ -3,6 +3,7 @@
|
||||||
version: '2.3'
|
version: '2.3'
|
||||||
|
|
||||||
networks:
|
networks:
|
||||||
|
adbhoney_local:
|
||||||
conpot_local_IEC104:
|
conpot_local_IEC104:
|
||||||
conpot_local_guardian_ast:
|
conpot_local_guardian_ast:
|
||||||
conpot_local_ipmi:
|
conpot_local_ipmi:
|
||||||
|
@ -24,6 +25,20 @@ services:
|
||||||
#### Honeypots
|
#### Honeypots
|
||||||
##################
|
##################
|
||||||
|
|
||||||
|
# Adbhoney service
|
||||||
|
adbhoney:
|
||||||
|
container_name: adbhoney
|
||||||
|
restart: always
|
||||||
|
networks:
|
||||||
|
- adbhoney_local
|
||||||
|
ports:
|
||||||
|
- "5555:5555"
|
||||||
|
image: "dtagdevsec/adbhoney:1811"
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- /data/adbhoney/log:/opt/adbhoney/log
|
||||||
|
- /data/adbhoney/downloads:/opt/adbhoney/dl
|
||||||
|
|
||||||
# Ciscoasa service
|
# Ciscoasa service
|
||||||
ciscoasa:
|
ciscoasa:
|
||||||
container_name: ciscoasa
|
container_name: ciscoasa
|
||||||
|
|
Binary file not shown.
Binary file not shown.
File diff suppressed because one or more lines are too long
|
@ -121,8 +121,9 @@ d-i preseed/late_command string \
|
||||||
in-target apt-get -y install grub-pc; \
|
in-target apt-get -y install grub-pc; \
|
||||||
in-target grub-install --force $(debconf-get partman-auto/disk); \
|
in-target grub-install --force $(debconf-get partman-auto/disk); \
|
||||||
in-target update-grub; \
|
in-target update-grub; \
|
||||||
cp /opt/installer/rc.local.install /target/etc/rc.local; \
|
in-target git clone https://github.com/dtag-dev-sec/tpotce /opt/tpot; \
|
||||||
cp /opt/installer -R /target/root/;
|
cp /target/opt/tpot/iso/installer/rc.local.install /target/etc/rc.local; \
|
||||||
|
cp /target/opt/tpot/iso/installer -R /target/root/;
|
||||||
|
|
||||||
##########
|
##########
|
||||||
### Reboot
|
### Reboot
|
||||||
|
|
Loading…
Reference in a new issue