mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-04-20 06:02:24 +00:00
Finalize Miniprint integration, tweaking
This commit is contained in:
parent
321df862e7
commit
c7e6f5a66f
18 changed files with 191 additions and 35 deletions
1
.gitignore
vendored
1
.gitignore
vendored
|
@ -1,5 +1,6 @@
|
||||||
# Ignore data folder
|
# Ignore data folder
|
||||||
data/
|
data/
|
||||||
|
_data/
|
||||||
**/.DS_Store
|
**/.DS_Store
|
||||||
.idea
|
.idea
|
||||||
install_tpot.log
|
install_tpot.log
|
||||||
|
|
57
README.md
57
README.md
|
@ -107,32 +107,33 @@ T-Pot's main components have been moved into the `tpotinit` Docker image allowin
|
||||||
|
|
||||||
## Honeypots and Tools
|
## Honeypots and Tools
|
||||||
T-Pot offers docker images for the following honeypots ...
|
T-Pot offers docker images for the following honeypots ...
|
||||||
* [adbhoney](https://github.com/huuck/ADBHoney),
|
* [adbhoney](https://github.com/huuck/ADBHoney)
|
||||||
* [beelzebub](https://github.com/mariocandela/beelzebub),
|
* [beelzebub](https://github.com/mariocandela/beelzebub)
|
||||||
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot),
|
* [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot)
|
||||||
* [citrixhoneypot](https://github.com/MalwareTech/CitrixHoneypot),
|
* [citrixhoneypot](https://github.com/MalwareTech/CitrixHoneypot)
|
||||||
* [conpot](http://conpot.org/),
|
* [conpot](http://conpot.org/)
|
||||||
* [cowrie](https://github.com/cowrie/cowrie),
|
* [cowrie](https://github.com/cowrie/cowrie)
|
||||||
* [ddospot](https://github.com/aelth/ddospot),
|
* [ddospot](https://github.com/aelth/ddospot)
|
||||||
* [dicompot](https://github.com/nsmfoo/dicompot),
|
* [dicompot](https://github.com/nsmfoo/dicompot)
|
||||||
* [dionaea](https://github.com/DinoTools/dionaea),
|
* [dionaea](https://github.com/DinoTools/dionaea)
|
||||||
* [elasticpot](https://gitlab.com/bontchev/elasticpot),
|
* [elasticpot](https://gitlab.com/bontchev/elasticpot)
|
||||||
* [endlessh](https://github.com/skeeto/endlessh),
|
* [endlessh](https://github.com/skeeto/endlessh)
|
||||||
* [galah](https://github.com/0x4D31/galah),
|
* [galah](https://github.com/0x4D31/galah)
|
||||||
* [go-pot](https://github.com/ryanolee/go-pot),
|
* [go-pot](https://github.com/ryanolee/go-pot)
|
||||||
* [glutton](https://github.com/mushorg/glutton),
|
* [glutton](https://github.com/mushorg/glutton)
|
||||||
* [hellpot](https://github.com/yunginnanet/HellPot),
|
* [hellpot](https://github.com/yunginnanet/HellPot)
|
||||||
* [heralding](https://github.com/johnnykv/heralding),
|
* [heralding](https://github.com/johnnykv/heralding)
|
||||||
* [honeypots](https://github.com/qeeqbox/honeypots),
|
* [honeypots](https://github.com/qeeqbox/honeypots)
|
||||||
* [honeytrap](https://github.com/armedpot/honeytrap/),
|
* [honeytrap](https://github.com/armedpot/honeytrap/)
|
||||||
* [ipphoney](https://gitlab.com/bontchev/ipphoney),
|
* [ipphoney](https://gitlab.com/bontchev/ipphoney)
|
||||||
* [log4pot](https://github.com/thomaspatzke/Log4Pot),
|
* [log4pot](https://github.com/thomaspatzke/Log4Pot)
|
||||||
* [mailoney](https://github.com/awhitehatter/mailoney),
|
* [mailoney](https://github.com/awhitehatter/mailoney)
|
||||||
* [medpot](https://github.com/schmalle/medpot),
|
* [medpot](https://github.com/schmalle/medpot)
|
||||||
* [redishoneypot](https://github.com/cypwnpwnsocute/RedisHoneyPot),
|
* [miniprint](https://github.com/sa7mon/miniprint)
|
||||||
* [sentrypeer](https://github.com/SentryPeer/SentryPeer),
|
* [redishoneypot](https://github.com/cypwnpwnsocute/RedisHoneyPot)
|
||||||
* [snare](http://mushmush.org/),
|
* [sentrypeer](https://github.com/SentryPeer/SentryPeer)
|
||||||
* [tanner](http://mushmush.org/),
|
* [snare](http://mushmush.org/)
|
||||||
|
* [tanner](http://mushmush.org/)
|
||||||
* [wordpot](https://github.com/gbrindisi/wordpot)
|
* [wordpot](https://github.com/gbrindisi/wordpot)
|
||||||
|
|
||||||
... alongside the following tools ...
|
... alongside the following tools ...
|
||||||
|
@ -273,6 +274,7 @@ Besides the ports generally needed by the OS, i.e. obtaining a DHCP lease, DNS,
|
||||||
| 80, 443, 8080, 9200, 25565 | tcp | incoming | Honeypot: Log4Pot |
|
| 80, 443, 8080, 9200, 25565 | tcp | incoming | Honeypot: Log4Pot |
|
||||||
| 25 | tcp | incoming | Honeypot: Mailoney |
|
| 25 | tcp | incoming | Honeypot: Mailoney |
|
||||||
| 2575 | tcp | incoming | Honeypot: Medpot |
|
| 2575 | tcp | incoming | Honeypot: Medpot |
|
||||||
|
| 9100 | tcp | incoming | Honeypot: Miniprint |
|
||||||
| 6379 | tcp | incoming | Honeypot: Redishoneypot |
|
| 6379 | tcp | incoming | Honeypot: Redishoneypot |
|
||||||
| 5060 | tcp/udp | incoming | Honeypot: SentryPeer |
|
| 5060 | tcp/udp | incoming | Honeypot: SentryPeer |
|
||||||
| 80 | tcp | incoming | Honeypot: Snare (Tanner) |
|
| 80 | tcp | incoming | Honeypot: Snare (Tanner) |
|
||||||
|
@ -780,7 +782,7 @@ Use the search function, it is possible a similar discussion has been opened alr
|
||||||
# Licenses
|
# Licenses
|
||||||
The software that T-Pot is built on uses the following licenses.
|
The software that T-Pot is built on uses the following licenses.
|
||||||
<br>GPLv2: [conpot](https://github.com/mushorg/conpot/blob/master/LICENSE.txt), [galah](https://github.com/0x4D31/galah?tab=Apache-2.0-1-ov-file#readme), [dionaea](https://github.com/DinoTools/dionaea/blob/master/LICENSE), [honeytrap](https://github.com/armedpot/honeytrap/blob/master/LICENSE), [suricata](https://suricata.io/features/open-source/)
|
<br>GPLv2: [conpot](https://github.com/mushorg/conpot/blob/master/LICENSE.txt), [galah](https://github.com/0x4D31/galah?tab=Apache-2.0-1-ov-file#readme), [dionaea](https://github.com/DinoTools/dionaea/blob/master/LICENSE), [honeytrap](https://github.com/armedpot/honeytrap/blob/master/LICENSE), [suricata](https://suricata.io/features/open-source/)
|
||||||
<br>GPLv3: [adbhoney](https://github.com/huuck/ADBHoney), [elasticpot](https://gitlab.com/bontchev/elasticpot/-/blob/master/LICENSE), [ewsposter](https://github.com/telekom-security/ews/), [log4pot](https://github.com/thomaspatzke/Log4Pot/blob/master/LICENSE), [fatt](https://github.com/0x4D31/fatt/blob/master/LICENSE), [heralding](https://github.com/johnnykv/heralding/blob/master/LICENSE.txt), [ipphoney](https://gitlab.com/bontchev/ipphoney/-/blob/master/LICENSE), [redishoneypot](https://github.com/cypwnpwnsocute/RedisHoneyPot/blob/main/LICENSE), [sentrypeer](https://github.com/SentryPeer/SentryPeer/blob/main/LICENSE.GPL-3.0-only), [snare](https://github.com/mushorg/snare/blob/master/LICENSE), [tanner](https://github.com/mushorg/snare/blob/master/LICENSE)
|
<br>GPLv3: [adbhoney](https://github.com/huuck/ADBHoney), [elasticpot](https://gitlab.com/bontchev/elasticpot/-/blob/master/LICENSE), [ewsposter](https://github.com/telekom-security/ews/), [log4pot](https://github.com/thomaspatzke/Log4Pot/blob/master/LICENSE), [fatt](https://github.com/0x4D31/fatt/blob/master/LICENSE), [heralding](https://github.com/johnnykv/heralding/blob/master/LICENSE.txt), [ipphoney](https://gitlab.com/bontchev/ipphoney/-/blob/master/LICENSE), [miniprint](https://github.com/sa7mon/miniprint?tab=GPL-3.0-1-ov-file#readme), [redishoneypot](https://github.com/cypwnpwnsocute/RedisHoneyPot/blob/main/LICENSE), [sentrypeer](https://github.com/SentryPeer/SentryPeer/blob/main/LICENSE.GPL-3.0-only), [snare](https://github.com/mushorg/snare/blob/master/LICENSE), [tanner](https://github.com/mushorg/snare/blob/master/LICENSE)
|
||||||
<br>Apache 2 License: [cyberchef](https://github.com/gchq/CyberChef/blob/master/LICENSE), [dicompot](https://github.com/nsmfoo/dicompot/blob/master/LICENSE), [elasticsearch](https://github.com/elasticsearch/elasticsearch/blob/master/LICENSE.txt), [go-pot](https://github.com/ryanolee/go-pot?tab=License-1-ov-file#readme), [logstash](https://github.com/elasticsearch/logstash/blob/master/LICENSE), [kibana](https://github.com/elasticsearch/kibana/blob/master/LICENSE.md), [docker](https://github.com/docker/docker/blob/master/LICENSE)
|
<br>Apache 2 License: [cyberchef](https://github.com/gchq/CyberChef/blob/master/LICENSE), [dicompot](https://github.com/nsmfoo/dicompot/blob/master/LICENSE), [elasticsearch](https://github.com/elasticsearch/elasticsearch/blob/master/LICENSE.txt), [go-pot](https://github.com/ryanolee/go-pot?tab=License-1-ov-file#readme), [logstash](https://github.com/elasticsearch/logstash/blob/master/LICENSE), [kibana](https://github.com/elasticsearch/kibana/blob/master/LICENSE.md), [docker](https://github.com/docker/docker/blob/master/LICENSE)
|
||||||
<br>MIT license: [autoheal](https://github.com/willfarrell/docker-autoheal?tab=MIT-1-ov-file#readme), [beelzebub](https://github.com/mariocandela/beelzebub?tab=MIT-1-ov-file#readme), [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/blob/master/LICENSE), [ddospot](https://github.com/aelth/ddospot/blob/master/LICENSE), [elasticvue](https://github.com/cars10/elasticvue/blob/master/LICENSE), [glutton](https://github.com/mushorg/glutton/blob/master/LICENSE), [hellpot](https://github.com/yunginnanet/HellPot/blob/master/LICENSE), [maltrail](https://github.com/stamparm/maltrail/blob/master/LICENSE)
|
<br>MIT license: [autoheal](https://github.com/willfarrell/docker-autoheal?tab=MIT-1-ov-file#readme), [beelzebub](https://github.com/mariocandela/beelzebub?tab=MIT-1-ov-file#readme), [ciscoasa](https://github.com/Cymmetria/ciscoasa_honeypot/blob/master/LICENSE), [ddospot](https://github.com/aelth/ddospot/blob/master/LICENSE), [elasticvue](https://github.com/cars10/elasticvue/blob/master/LICENSE), [glutton](https://github.com/mushorg/glutton/blob/master/LICENSE), [hellpot](https://github.com/yunginnanet/HellPot/blob/master/LICENSE), [maltrail](https://github.com/stamparm/maltrail/blob/master/LICENSE)
|
||||||
<br> Unlicense: [endlessh](https://github.com/skeeto/endlessh/blob/master/UNLICENSE)
|
<br> Unlicense: [endlessh](https://github.com/skeeto/endlessh/blob/master/UNLICENSE)
|
||||||
|
@ -824,6 +826,7 @@ Without open source and the development community we are proud to be a part of,
|
||||||
* [mailoney](https://github.com/awhitehatter/mailoney)
|
* [mailoney](https://github.com/awhitehatter/mailoney)
|
||||||
* [maltrail](https://github.com/stamparm/maltrail/graphs/contributors)
|
* [maltrail](https://github.com/stamparm/maltrail/graphs/contributors)
|
||||||
* [medpot](https://github.com/schmalle/medpot/graphs/contributors)
|
* [medpot](https://github.com/schmalle/medpot/graphs/contributors)
|
||||||
|
* [miniprint](https://github.com/sa7mon/miniprint/graphs/contributors)
|
||||||
* [p0f](http://lcamtuf.coredump.cx/p0f3/)
|
* [p0f](http://lcamtuf.coredump.cx/p0f3/)
|
||||||
* [redishoneypot](https://github.com/cypwnpwnsocute/RedisHoneyPot/graphs/contributors)
|
* [redishoneypot](https://github.com/cypwnpwnsocute/RedisHoneyPot/graphs/contributors)
|
||||||
* [sentrypeer](https://github.com/SentryPeer/SentryPeer/graphs/contributors)
|
* [sentrypeer](https://github.com/SentryPeer/SentryPeer/graphs/contributors)
|
||||||
|
|
|
@ -459,6 +459,7 @@ services:
|
||||||
ports:
|
ports:
|
||||||
- "8080:80"
|
- "8080:80"
|
||||||
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
read_only: true
|
read_only: true
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
||||||
|
|
|
@ -18,6 +18,7 @@ networks:
|
||||||
log4pot_local:
|
log4pot_local:
|
||||||
mailoney_local:
|
mailoney_local:
|
||||||
medpot_local:
|
medpot_local:
|
||||||
|
miniprint_local:
|
||||||
redishoneypot_local:
|
redishoneypot_local:
|
||||||
sentrypeer_local:
|
sentrypeer_local:
|
||||||
tanner_local:
|
tanner_local:
|
||||||
|
@ -410,6 +411,24 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
||||||
|
|
||||||
|
# Miniprint service
|
||||||
|
miniprint:
|
||||||
|
container_name: miniprint
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
logstash:
|
||||||
|
condition: service_healthy
|
||||||
|
networks:
|
||||||
|
- miniprint_local
|
||||||
|
ports:
|
||||||
|
- "9100:9100"
|
||||||
|
image: ${TPOT_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/log/:/opt/miniprint/log/
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/uploads/:/opt/miniprint/uploads/
|
||||||
|
|
||||||
# Redishoneypot service
|
# Redishoneypot service
|
||||||
redishoneypot:
|
redishoneypot:
|
||||||
container_name: redishoneypot
|
container_name: redishoneypot
|
||||||
|
@ -542,6 +561,7 @@ services:
|
||||||
ports:
|
ports:
|
||||||
- "8080:80"
|
- "8080:80"
|
||||||
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
read_only: true
|
read_only: true
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
||||||
|
|
|
@ -16,6 +16,7 @@ networks:
|
||||||
ipphoney_local:
|
ipphoney_local:
|
||||||
mailoney_local:
|
mailoney_local:
|
||||||
medpot_local:
|
medpot_local:
|
||||||
|
miniprint_local:
|
||||||
redishoneypot_local:
|
redishoneypot_local:
|
||||||
sentrypeer_local:
|
sentrypeer_local:
|
||||||
tanner_local:
|
tanner_local:
|
||||||
|
@ -450,6 +451,24 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
||||||
|
|
||||||
|
# Miniprint service
|
||||||
|
miniprint:
|
||||||
|
container_name: miniprint
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
tpotinit:
|
||||||
|
condition: service_healthy
|
||||||
|
networks:
|
||||||
|
- miniprint_local
|
||||||
|
ports:
|
||||||
|
- "9100:9100"
|
||||||
|
image: ${TPOT_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/log/:/opt/miniprint/log/
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/uploads/:/opt/miniprint/uploads/
|
||||||
|
|
||||||
# Redishoneypot service
|
# Redishoneypot service
|
||||||
redishoneypot:
|
redishoneypot:
|
||||||
container_name: redishoneypot
|
container_name: redishoneypot
|
||||||
|
@ -582,6 +601,7 @@ services:
|
||||||
ports:
|
ports:
|
||||||
- "8080:80"
|
- "8080:80"
|
||||||
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
read_only: true
|
read_only: true
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
||||||
|
|
|
@ -16,6 +16,7 @@ networks:
|
||||||
ipphoney_local:
|
ipphoney_local:
|
||||||
mailoney_local:
|
mailoney_local:
|
||||||
medpot_local:
|
medpot_local:
|
||||||
|
miniprint_local:
|
||||||
redishoneypot_local:
|
redishoneypot_local:
|
||||||
sentrypeer_local:
|
sentrypeer_local:
|
||||||
tanner_local:
|
tanner_local:
|
||||||
|
@ -452,6 +453,24 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
||||||
|
|
||||||
|
# Miniprint service
|
||||||
|
miniprint:
|
||||||
|
container_name: miniprint
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
tpotinit:
|
||||||
|
condition: service_healthy
|
||||||
|
networks:
|
||||||
|
- miniprint_local
|
||||||
|
ports:
|
||||||
|
- "9100:9100"
|
||||||
|
image: ${TPOT_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/log/:/opt/miniprint/log/
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/uploads/:/opt/miniprint/uploads/
|
||||||
|
|
||||||
# Redishoneypot service
|
# Redishoneypot service
|
||||||
redishoneypot:
|
redishoneypot:
|
||||||
container_name: redishoneypot
|
container_name: redishoneypot
|
||||||
|
@ -584,6 +603,7 @@ services:
|
||||||
ports:
|
ports:
|
||||||
- "8080:80"
|
- "8080:80"
|
||||||
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
read_only: true
|
read_only: true
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
||||||
|
|
|
@ -26,6 +26,7 @@ networks:
|
||||||
log4pot_local:
|
log4pot_local:
|
||||||
mailoney_local:
|
mailoney_local:
|
||||||
medpot_local:
|
medpot_local:
|
||||||
|
miniprint_local:
|
||||||
redishoneypot_local:
|
redishoneypot_local:
|
||||||
sentrypeer_local:
|
sentrypeer_local:
|
||||||
tanner_local:
|
tanner_local:
|
||||||
|
@ -664,6 +665,24 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
||||||
|
|
||||||
|
# Miniprint service
|
||||||
|
miniprint:
|
||||||
|
container_name: miniprint
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
tpotinit:
|
||||||
|
condition: service_healthy
|
||||||
|
networks:
|
||||||
|
- miniprint_local
|
||||||
|
ports:
|
||||||
|
- "9100:9100"
|
||||||
|
image: ${TPOT_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/log/:/opt/miniprint/log/
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/uploads/:/opt/miniprint/uploads/
|
||||||
|
|
||||||
# Redishoneypot service
|
# Redishoneypot service
|
||||||
redishoneypot:
|
redishoneypot:
|
||||||
container_name: redishoneypot
|
container_name: redishoneypot
|
||||||
|
|
Binary file not shown.
Before Width: | Height: | Size: 661 KiB After Width: | Height: | Size: 671 KiB |
|
@ -16,6 +16,7 @@ networks:
|
||||||
ipphoney_local:
|
ipphoney_local:
|
||||||
mailoney_local:
|
mailoney_local:
|
||||||
medpot_local:
|
medpot_local:
|
||||||
|
miniprint_local:
|
||||||
redishoneypot_local:
|
redishoneypot_local:
|
||||||
sentrypeer_local:
|
sentrypeer_local:
|
||||||
tanner_local:
|
tanner_local:
|
||||||
|
@ -452,6 +453,24 @@ services:
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
- ${TPOT_DATA_PATH}/medpot/log/:/var/log/medpot
|
||||||
|
|
||||||
|
# Miniprint service
|
||||||
|
miniprint:
|
||||||
|
container_name: miniprint
|
||||||
|
restart: always
|
||||||
|
depends_on:
|
||||||
|
tpotinit:
|
||||||
|
condition: service_healthy
|
||||||
|
networks:
|
||||||
|
- miniprint_local
|
||||||
|
ports:
|
||||||
|
- "9100:9100"
|
||||||
|
image: ${TPOT_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
|
read_only: true
|
||||||
|
volumes:
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/log/:/opt/miniprint/log/
|
||||||
|
- ${TPOT_DATA_PATH}/miniprint/uploads/:/opt/miniprint/uploads/
|
||||||
|
|
||||||
# Redishoneypot service
|
# Redishoneypot service
|
||||||
redishoneypot:
|
redishoneypot:
|
||||||
container_name: redishoneypot
|
container_name: redishoneypot
|
||||||
|
@ -584,6 +603,7 @@ services:
|
||||||
ports:
|
ports:
|
||||||
- "8080:80"
|
- "8080:80"
|
||||||
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
image: ${TPOT_REPO}/wordpot:${TPOT_VERSION}
|
||||||
|
pull_policy: ${TPOT_PULL_POLICY}
|
||||||
read_only: true
|
read_only: true
|
||||||
volumes:
|
volumes:
|
||||||
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
- ${TPOT_DATA_PATH}/wordpot/log:/opt/wordpot/logs/
|
||||||
|
|
|
@ -216,6 +216,15 @@ services:
|
||||||
context: ../medpot/
|
context: ../medpot/
|
||||||
<<: *common-build
|
<<: *common-build
|
||||||
|
|
||||||
|
# Miniprint
|
||||||
|
miniprint:
|
||||||
|
image: ${TPOT_DOCKER_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
build:
|
||||||
|
tags:
|
||||||
|
- ${TPOT_GHCR_REPO}/miniprint:${TPOT_VERSION}
|
||||||
|
context: ../miniprint/
|
||||||
|
<<: *common-build
|
||||||
|
|
||||||
# Redishoneypot
|
# Redishoneypot
|
||||||
redishoneypot:
|
redishoneypot:
|
||||||
image: ${TPOT_DOCKER_REPO}/redishoneypot:${TPOT_VERSION}
|
image: ${TPOT_DOCKER_REPO}/redishoneypot:${TPOT_VERSION}
|
||||||
|
|
14
docker/elk/logstash/dist/http_output.conf
vendored
14
docker/elk/logstash/dist/http_output.conf
vendored
|
@ -161,6 +161,13 @@ input {
|
||||||
type => "Log4pot"
|
type => "Log4pot"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Miniprint
|
||||||
|
file {
|
||||||
|
path => ["/data/miniprint/log/miniprint.json"]
|
||||||
|
codec => json
|
||||||
|
type => "Miniprint"
|
||||||
|
}
|
||||||
|
|
||||||
# Mailoney
|
# Mailoney
|
||||||
file {
|
file {
|
||||||
path => ["/data/mailoney/log/commands.log"]
|
path => ["/data/mailoney/log/commands.log"]
|
||||||
|
@ -612,6 +619,13 @@ filter {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Miniprint
|
||||||
|
if [type] == "Miniprint" {
|
||||||
|
date {
|
||||||
|
match => [ "timestamp", "ISO8601" ]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
# Redishoneypot
|
# Redishoneypot
|
||||||
if [type] == "Redishoneypot" {
|
if [type] == "Redishoneypot" {
|
||||||
date {
|
date {
|
||||||
|
|
14
docker/elk/logstash/dist/logstash.conf
vendored
14
docker/elk/logstash/dist/logstash.conf
vendored
|
@ -175,6 +175,13 @@ input {
|
||||||
type => "Medpot"
|
type => "Medpot"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Miniprint
|
||||||
|
file {
|
||||||
|
path => ["/data/miniprint/log/miniprint.json"]
|
||||||
|
codec => json
|
||||||
|
type => "Miniprint"
|
||||||
|
}
|
||||||
|
|
||||||
# Redishoneypot
|
# Redishoneypot
|
||||||
file {
|
file {
|
||||||
path => ["/data/redishoneypot/log/redishoneypot.log"]
|
path => ["/data/redishoneypot/log/redishoneypot.log"]
|
||||||
|
@ -612,6 +619,13 @@ filter {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Miniprint
|
||||||
|
if [type] == "Miniprint" {
|
||||||
|
date {
|
||||||
|
match => [ "timestamp", "ISO8601" ]
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
# Redishoneypot
|
# Redishoneypot
|
||||||
if [type] == "Redishoneypot" {
|
if [type] == "Redishoneypot" {
|
||||||
date {
|
date {
|
||||||
|
|
|
@ -13,7 +13,7 @@ RUN apk --no-cache -U add \
|
||||||
# Install from GitHub and setup
|
# Install from GitHub and setup
|
||||||
mkdir -p /opt && \
|
mkdir -p /opt && \
|
||||||
cd /opt/ && \
|
cd /opt/ && \
|
||||||
git clone https://github.com/t3chn0m4g3/t-pot-attack-map -b 2.2.3 && \
|
git clone https://github.com/t3chn0m4g3/t-pot-attack-map -b 2.2.4 && \
|
||||||
cd t-pot-attack-map && \
|
cd t-pot-attack-map && \
|
||||||
pip3 install --break-system-packages --upgrade pip && \
|
pip3 install --break-system-packages --upgrade pip && \
|
||||||
pip3 install --break-system-packages -r requirements.txt && \
|
pip3 install --break-system-packages -r requirements.txt && \
|
||||||
|
|
|
@ -14,7 +14,7 @@ services:
|
||||||
- miniprint_local
|
- miniprint_local
|
||||||
ports:
|
ports:
|
||||||
- "9100:9100"
|
- "9100:9100"
|
||||||
image: dtagdevsec/miniprint:testing
|
image: dtagdevsec/miniprint:24.04
|
||||||
read_only: true
|
read_only: true
|
||||||
volumes:
|
volumes:
|
||||||
- $HOME/tpotce/data/miniprint/log/:/opt/miniprint/log/
|
- $HOME/tpotce/data/miniprint/log/:/opt/miniprint/log/
|
||||||
|
|
24
docker/tpotinit/dist/bin/clean.sh
vendored
24
docker/tpotinit/dist/bin/clean.sh
vendored
|
@ -32,6 +32,8 @@ fuLOGROTATE () {
|
||||||
local myDIONAEABITGZ="/data/dionaea/bistreams.tgz"
|
local myDIONAEABITGZ="/data/dionaea/bistreams.tgz"
|
||||||
local myDIONAEABIN="/data/dionaea/binaries/"
|
local myDIONAEABIN="/data/dionaea/binaries/"
|
||||||
local myDIONAEABINTGZ="/data/dionaea/binaries.tgz"
|
local myDIONAEABINTGZ="/data/dionaea/binaries.tgz"
|
||||||
|
local myMINIPRINTU="/data/miniprint/uploads/"
|
||||||
|
local myMINIPRINTTGZ="/data/miniprint/uploads.tgz"
|
||||||
local myHONEYTRAPATTACKS="/data/honeytrap/attacks/"
|
local myHONEYTRAPATTACKS="/data/honeytrap/attacks/"
|
||||||
local myHONEYTRAPATTACKSTGZ="/data/honeytrap/attacks.tgz"
|
local myHONEYTRAPATTACKSTGZ="/data/honeytrap/attacks.tgz"
|
||||||
local myHONEYTRAPDL="/data/honeytrap/downloads/"
|
local myHONEYTRAPDL="/data/honeytrap/downloads/"
|
||||||
|
@ -54,21 +56,22 @@ if [ "$(fuEMPTY $myCOWRIETTYLOGS)" != "0" ]; then tar -I $myPIGZ -cvf $myCOWRIET
|
||||||
if [ "$(fuEMPTY $myCOWRIEDL)" != "0" ]; then tar -I $myPIGZ -cvf $myCOWRIEDLTGZ $myCOWRIEDL; fi
|
if [ "$(fuEMPTY $myCOWRIEDL)" != "0" ]; then tar -I $myPIGZ -cvf $myCOWRIEDLTGZ $myCOWRIEDL; fi
|
||||||
if [ "$(fuEMPTY $myDIONAEABI)" != "0" ]; then tar -I $myPIGZ -cvf $myDIONAEABITGZ $myDIONAEABI; fi
|
if [ "$(fuEMPTY $myDIONAEABI)" != "0" ]; then tar -I $myPIGZ -cvf $myDIONAEABITGZ $myDIONAEABI; fi
|
||||||
if [ "$(fuEMPTY $myDIONAEABIN)" != "0" ]; then tar -I $myPIGZ -cvf $myDIONAEABINTGZ $myDIONAEABIN; fi
|
if [ "$(fuEMPTY $myDIONAEABIN)" != "0" ]; then tar -I $myPIGZ -cvf $myDIONAEABINTGZ $myDIONAEABIN; fi
|
||||||
|
if [ "$(fuEMPTY $myMINIPRINTU)" != "0" ]; then tar -I $myPIGZ -cvf $myMINIPRINTTGZ $myMINIPRINTU; fi
|
||||||
if [ "$(fuEMPTY $myHONEYTRAPATTACKS)" != "0" ]; then tar -I $myPIGZ -cvf $myHONEYTRAPATTACKSTGZ $myHONEYTRAPATTACKS; fi
|
if [ "$(fuEMPTY $myHONEYTRAPATTACKS)" != "0" ]; then tar -I $myPIGZ -cvf $myHONEYTRAPATTACKSTGZ $myHONEYTRAPATTACKS; fi
|
||||||
if [ "$(fuEMPTY $myHONEYTRAPDL)" != "0" ]; then tar -I $myPIGZ -cvf $myHONEYTRAPDLTGZ $myHONEYTRAPDL; fi
|
if [ "$(fuEMPTY $myHONEYTRAPDL)" != "0" ]; then tar -I $myPIGZ -cvf $myHONEYTRAPDLTGZ $myHONEYTRAPDL; fi
|
||||||
if [ "$(fuEMPTY $myTANNERF)" != "0" ]; then tar -I $myPIGZ -cvf $myTANNERFTGZ $myTANNERF; fi
|
if [ "$(fuEMPTY $myTANNERF)" != "0" ]; then tar -I $myPIGZ -cvf $myTANNERFTGZ $myTANNERF; fi
|
||||||
|
|
||||||
# Ensure correct permissions and ownership for previously created archives
|
# Ensure correct permissions and ownership for previously created archives
|
||||||
chmod 770 $myADBHONEYTGZ $myCOWRIETTYTGZ $myCOWRIEDLTGZ $myDIONAEABITGZ $myDIONAEABINTGZ $myHONEYTRAPATTACKSTGZ $myHONEYTRAPDLTGZ $myTANNERFTGZ
|
chmod 770 $myADBHONEYTGZ $myCOWRIETTYTGZ $myCOWRIEDLTGZ $myDIONAEABITGZ $myDIONAEABINTGZ $myHONEYTRAPATTACKSTGZ $myHONEYTRAPDLTGZ $myMINIPRINTTGZ $myTANNERFTGZ
|
||||||
chown tpot:tpot $myADBHONEYTGZ $myCOWRIETTYTGZ $myCOWRIEDLTGZ $myDIONAEABITGZ $myDIONAEABINTGZ $myHONEYTRAPATTACKSTGZ $myHONEYTRAPDLTGZ $myTANNERFTGZ
|
chown tpot:tpot $myADBHONEYTGZ $myCOWRIETTYTGZ $myCOWRIEDLTGZ $myDIONAEABITGZ $myDIONAEABINTGZ $myHONEYTRAPATTACKSTGZ $myHONEYTRAPDLTGZ $myMINIPRINTTGZ $myTANNERFTGZ
|
||||||
|
|
||||||
# Need to remove subfolders since too many files cause rm to exit with errors
|
# Need to remove subfolders since too many files cause rm to exit with errors
|
||||||
rm -rf $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myTANNERF
|
rm -rf $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myMINIPRINTU $myTANNERF
|
||||||
|
|
||||||
# Recreate subfolders with correct permissions and ownership
|
# Recreate subfolders with correct permissions and ownership
|
||||||
mkdir -p $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myTANNERF
|
mkdir -p $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myMINIPRINTU $myTANNERF
|
||||||
chmod 770 $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myTANNERF
|
chmod 770 $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myMINIPRINTU $myTANNERF
|
||||||
chown tpot:tpot $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myTANNERF
|
chown tpot:tpot $myADBHONEYDL $myCOWRIETTYLOGS $myCOWRIEDL $myDIONAEABI $myDIONAEABIN $myHONEYTRAPATTACKS $myHONEYTRAPDL $myMINIPRINTU $myTANNERF
|
||||||
|
|
||||||
# Run logrotate again to account for previously created archives - DO NOT FORCE HERE!
|
# Run logrotate again to account for previously created archives - DO NOT FORCE HERE!
|
||||||
logrotate -s $mySTATUS $myCONF
|
logrotate -s $mySTATUS $myCONF
|
||||||
|
@ -294,6 +297,14 @@ fuMEDPOT () {
|
||||||
chown tpot:tpot /data/medpot/ -R
|
chown tpot:tpot /data/medpot/ -R
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# Let's create a function to clean up and prepare miniprint data
|
||||||
|
fuMINIPRINT () {
|
||||||
|
if [ "$myPERSISTENCE" != "on" ]; then rm -rf /data/miniprint/*; fi
|
||||||
|
mkdir -vp /data/miniprint/{log,uploads}
|
||||||
|
chmod 770 /data/miniprint/ -R
|
||||||
|
chown tpot:tpot /data/miniprint/ -R
|
||||||
|
}
|
||||||
|
|
||||||
# Let's create a function to clean up nginx logs
|
# Let's create a function to clean up nginx logs
|
||||||
fuNGINX () {
|
fuNGINX () {
|
||||||
if [ "$myPERSISTENCE" != "on" ]; then rm -rf /data/nginx/log/*; fi
|
if [ "$myPERSISTENCE" != "on" ]; then rm -rf /data/nginx/log/*; fi
|
||||||
|
@ -410,6 +421,7 @@ fuIPPHONEY
|
||||||
fuLOG4POT
|
fuLOG4POT
|
||||||
fuMAILONEY
|
fuMAILONEY
|
||||||
fuMEDPOT
|
fuMEDPOT
|
||||||
|
fuMINIPRINT
|
||||||
fuNGINX
|
fuNGINX
|
||||||
fuREDISHONEYPOT
|
fuREDISHONEYPOT
|
||||||
fuSENTRYPEER
|
fuSENTRYPEER
|
||||||
|
|
|
@ -34,6 +34,7 @@
|
||||||
/data/log4pot/log/*.log
|
/data/log4pot/log/*.log
|
||||||
/data/mailoney/log/*.log
|
/data/mailoney/log/*.log
|
||||||
/data/medpot/log/*.log
|
/data/medpot/log/*.log
|
||||||
|
/data/miniprint/log/*.json
|
||||||
/data/nginx/log/*.log
|
/data/nginx/log/*.log
|
||||||
/data/p0f/log/p0f.json
|
/data/p0f/log/p0f.json
|
||||||
/data/redishoneypot/log/*.log
|
/data/redishoneypot/log/*.log
|
||||||
|
@ -61,6 +62,8 @@
|
||||||
/data/dionaea/binaries.tgz
|
/data/dionaea/binaries.tgz
|
||||||
/data/honeytrap/attacks.tgz
|
/data/honeytrap/attacks.tgz
|
||||||
/data/honeytrap/downloads.tgz
|
/data/honeytrap/downloads.tgz
|
||||||
|
/data/miniprint/uploads.tgz
|
||||||
|
/data/tanner/files.tgz
|
||||||
{
|
{
|
||||||
su tpot tpot
|
su tpot tpot
|
||||||
copytruncate
|
copytruncate
|
||||||
|
|
BIN
docker/tpotinit/dist/etc/objects/elkbase.tgz
vendored
BIN
docker/tpotinit/dist/etc/objects/elkbase.tgz
vendored
Binary file not shown.
Binary file not shown.
Loading…
Reference in a new issue