Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-10-26 18:24:45 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Merge pull request #21 from telekom-security/master

Browse source 
Merge Latest Changes to Original Repository
This commit is contained in:
Brian Lechthaler 2021-01-06 20:04:23 -08:00 committed by GitHub
commit cf68cdbee8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
16 changed files with 158 additions and 171 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/ISSUE_TEMPLATE/general-issue-for-t-pot.md vendored
View file

@ -7,6 +7,8 @@ assignees: ''
--- ---
🗨️ Please post your questions in [Discussions](https://github.com/telekom-security/tpotce/discussions) and keep the issues for **issues**. Thank you 😁.<br>
Before you post your issue make sure it has not been answered yet and provide `basic support information` if you come to the conclusion it is a new issue. Before you post your issue make sure it has not been answered yet and provide `basic support information` if you come to the conclusion it is a new issue.
- 🔍 Use the [search function](https://github.com/dtag-dev-sec/tpotce/issues?utf8=%E2%9C%93&q=) first - 🔍 Use the [search function](https://github.com/dtag-dev-sec/tpotce/issues?utf8=%E2%9C%93&q=) first

2
docker/fatt/Dockerfile
View file

@ -40,4 +40,4 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
STOPSIGNAL SIGINT STOPSIGNAL SIGINT
ENV PYTHONPATH /opt/fatt ENV PYTHONPATH /opt/fatt
WORKDIR /opt/fatt WORKDIR /opt/fatt
CMD python3 fatt.py -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:]) --print_output --json_logging -o log/fatt.log CMD python3 fatt.py -i $(/sbin/ip address show | /usr/bin/awk '/inet.*brd/{ print $NF; exit }') --print_output --json_logging -o log/fatt.log

2
docker/glutton/Dockerfile
View file

@ -53,4 +53,4 @@ RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
# Start glutton # Start glutton
WORKDIR /opt/glutton WORKDIR /opt/glutton
USER glutton:glutton USER glutton:glutton
CMD exec bin/server -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:]) -l /var/log/glutton/glutton.log > /dev/null 2>&1 CMD exec bin/server -i $(/sbin/ip address show | /usr/bin/awk '/inet.*brd/{ print $NF; exit }') -l /var/log/glutton/glutton.log > /dev/null 2>&1

BIN
docker/heimdall/dist/app/app.sqlite vendored
View file

Binary file not shown.

2
docker/p0f/Dockerfile
View file

@ -32,4 +32,4 @@ RUN apk -U --no-cache add \
# Start p0f # Start p0f
WORKDIR /opt/p0f WORKDIR /opt/p0f
USER p0f:p0f USER p0f:p0f
CMD exec /opt/p0f/p0f -u p0f -j -o /var/log/p0f/p0f.json -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:]) > /dev/null CMD exec /opt/p0f/p0f -u p0f -j -o /var/log/p0f/p0f.json -i $(/sbin/ip address show | /usr/bin/awk '/inet.*brd/{ print $NF; exit }') > /dev/null

2
docker/suricata/Dockerfile
View file

@ -34,4 +34,4 @@ RUN apk -U --no-cache add \
# #
# Start suricata # Start suricata
STOPSIGNAL SIGINT STOPSIGNAL SIGINT
CMD SURICATA_CAPTURE_FILTER=$(update.sh $OINKCODE) && exec suricata -v -F $SURICATA_CAPTURE_FILTER -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:]) CMD SURICATA_CAPTURE_FILTER=$(update.sh $OINKCODE) && exec suricata -v -F $SURICATA_CAPTURE_FILTER -i $(/sbin/ip address show | /usr/bin/awk '/inet.*brd/{ print $NF; exit }')

2
docker/suricata/Dockerfile.from.source
View file

@ -137,4 +137,4 @@ RUN apk -U add \
# #
# Start suricata # Start suricata
STOPSIGNAL SIGINT STOPSIGNAL SIGINT
CMD SURICATA_CAPTURE_FILTER=$(update.sh $OINKCODE) && exec suricata -v -F $SURICATA_CAPTURE_FILTER -i $(/sbin/ip address | grep '^2: ' | awk '{ print $2 }' | tr -d [:punct:]) CMD SURICATA_CAPTURE_FILTER=$(update.sh $OINKCODE) && exec suricata -v -F $SURICATA_CAPTURE_FILTER -i $(/sbin/ip address show | /usr/bin/awk '/inet.*brd/{ print $NF; exit }')

26
etc/compose/collector.yml
View file

@ -38,7 +38,7 @@ services:
- "3389:3389" - "3389:3389"
- "5432:5432" - "5432:5432"
- "5900:5900" - "5900:5900"
image: "ghcr.io/telekom-security/heralding:2006" image: "dtagdevsec/heralding:2006"
read_only: true read_only: true
volumes: volumes:
- /data/heralding/log:/var/log/heralding - /data/heralding/log:/var/log/heralding
@ -52,7 +52,7 @@ services:
network_mode: "host" network_mode: "host"
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
image: "ghcr.io/telekom-security/honeytrap:2006" image: "dtagdevsec/honeytrap:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeytrap/attacks:/opt/honeytrap/var/attacks - /data/honeytrap/attacks:/opt/honeytrap/var/attacks
@ -73,7 +73,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/fatt:2006" image: "dtagdevsec/fatt:2006"
volumes: volumes:
- /data/fatt/log:/opt/fatt/log - /data/fatt/log:/opt/fatt/log
@ -82,7 +82,7 @@ services:
container_name: p0f container_name: p0f
restart: always restart: always
network_mode: "host" network_mode: "host"
image: "ghcr.io/telekom-security/p0f:2006" image: "dtagdevsec/p0f:2006"
read_only: true read_only: true
volumes: volumes:
- /data/p0f/log:/var/log/p0f - /data/p0f/log:/var/log/p0f
@ -99,7 +99,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/suricata:2006" image: "dtagdevsec/suricata:2006"
volumes: volumes:
- /data/suricata/log:/var/log/suricata - /data/suricata/log:/var/log/suricata
@ -116,7 +116,7 @@ services:
- cyberchef_local - cyberchef_local
ports: ports:
- "127.0.0.1:64299:8000" - "127.0.0.1:64299:8000"
image: "ghcr.io/telekom-security/cyberchef:2006" image: "dtagdevsec/cyberchef:2006"
read_only: true read_only: true
#### ELK #### ELK
@ -140,7 +140,7 @@ services:
mem_limit: 4g mem_limit: 4g
ports: ports:
- "127.0.0.1:64298:9200" - "127.0.0.1:64298:9200"
image: "ghcr.io/telekom-security/elasticsearch:2006" image: "dtagdevsec/elasticsearch:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -153,7 +153,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64296:5601" - "127.0.0.1:64296:5601"
image: "ghcr.io/telekom-security/kibana:2006" image: "dtagdevsec/kibana:2006"
## Logstash service ## Logstash service
logstash: logstash:
@ -166,7 +166,7 @@ services:
condition: service_healthy condition: service_healthy
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/logstash:2006" image: "dtagdevsec/logstash:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -179,7 +179,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64302:9100" - "127.0.0.1:64302:9100"
image: "ghcr.io/telekom-security/head:2006" image: "dtagdevsec/head:2006"
read_only: true read_only: true
# Ewsposter service # Ewsposter service
@ -199,7 +199,7 @@ services:
- EWS_HPFEEDS_FORMAT=json - EWS_HPFEEDS_FORMAT=json
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/ewsposter:2006" image: "dtagdevsec/ewsposter:2006"
volumes: volumes:
- /data:/data - /data:/data
- /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip
@ -227,7 +227,7 @@ services:
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304" - "127.0.0.1:64304:64304"
image: "ghcr.io/telekom-security/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
@ -245,6 +245,6 @@ services:
- spiderfoot_local - spiderfoot_local
ports: ports:
- "127.0.0.1:64303:8080" - "127.0.0.1:64303:8080"
image: "ghcr.io/telekom-security/spiderfoot:2006" image: "dtagdevsec/spiderfoot:2006"
volumes: volumes:
- /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db - /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db

46
etc/compose/industrial.yml
View file

@ -48,7 +48,7 @@ services:
- "21:21" - "21:21"
- "44818:44818" - "44818:44818"
- "47808:47808" - "47808:47808"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -70,7 +70,7 @@ services:
ports: ports:
# - "161:161" # - "161:161"
- "2404:2404" - "2404:2404"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -91,7 +91,7 @@ services:
- conpot_local_guardian_ast - conpot_local_guardian_ast
ports: ports:
- "10001:10001" - "10001:10001"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -112,7 +112,7 @@ services:
- conpot_local_ipmi - conpot_local_ipmi
ports: ports:
- "623:623" - "623:623"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -134,7 +134,7 @@ services:
ports: ports:
- "1025:1025" - "1025:1025"
- "50100:50100" - "50100:50100"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -151,7 +151,7 @@ services:
ports: ports:
- "22:22" - "22:22"
- "23:23" - "23:23"
image: "ghcr.io/telekom-security/cowrie:2006" image: "dtagdevsec/cowrie:2006"
read_only: true read_only: true
volumes: volumes:
- /data/cowrie/downloads:/home/cowrie/cowrie/dl - /data/cowrie/downloads:/home/cowrie/cowrie/dl
@ -170,7 +170,7 @@ services:
- dicompot_local - dicompot_local
ports: ports:
- "11112:11112" - "11112:11112"
image: "ghcr.io/telekom-security/dicompot:2006" image: "dtagdevsec/dicompot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dicompot/log:/var/log/dicompot - /data/dicompot/log:/var/log/dicompot
@ -199,7 +199,7 @@ services:
# - "3389:3389" # - "3389:3389"
# - "5432:5432" # - "5432:5432"
- "5900:5900" - "5900:5900"
image: "ghcr.io/telekom-security/heralding:2006" image: "dtagdevsec/heralding:2006"
read_only: true read_only: true
volumes: volumes:
- /data/heralding/log:/var/log/heralding - /data/heralding/log:/var/log/heralding
@ -212,7 +212,7 @@ services:
- honeysap_local - honeysap_local
ports: ports:
- "3299:3299" - "3299:3299"
image: "ghcr.io/telekom-security/honeysap:2006" image: "dtagdevsec/honeysap:2006"
volumes: volumes:
- /data/honeysap/log:/opt/honeysap/log - /data/honeysap/log:/opt/honeysap/log
@ -225,7 +225,7 @@ services:
network_mode: "host" network_mode: "host"
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
image: "ghcr.io/telekom-security/honeytrap:2006" image: "dtagdevsec/honeytrap:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeytrap/attacks:/opt/honeytrap/var/attacks - /data/honeytrap/attacks:/opt/honeytrap/var/attacks
@ -240,7 +240,7 @@ services:
- medpot_local - medpot_local
ports: ports:
- "2575:2575" - "2575:2575"
image: "ghcr.io/telekom-security/medpot:2006" image: "dtagdevsec/medpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/medpot/log/:/var/log/medpot - /data/medpot/log/:/var/log/medpot
@ -261,7 +261,7 @@ services:
- rdpy_local - rdpy_local
ports: ports:
- "3389:3389" - "3389:3389"
image: "ghcr.io/telekom-security/rdpy:2006" image: "dtagdevsec/rdpy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/rdpy/log:/var/log/rdpy - /data/rdpy/log:/var/log/rdpy
@ -280,7 +280,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/fatt:2006" image: "dtagdevsec/fatt:2006"
volumes: volumes:
- /data/fatt/log:/opt/fatt/log - /data/fatt/log:/opt/fatt/log
@ -289,7 +289,7 @@ services:
container_name: p0f container_name: p0f
restart: always restart: always
network_mode: "host" network_mode: "host"
image: "ghcr.io/telekom-security/p0f:2006" image: "dtagdevsec/p0f:2006"
read_only: true read_only: true
volumes: volumes:
- /data/p0f/log:/var/log/p0f - /data/p0f/log:/var/log/p0f
@ -306,7 +306,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/suricata:2006" image: "dtagdevsec/suricata:2006"
volumes: volumes:
- /data/suricata/log:/var/log/suricata - /data/suricata/log:/var/log/suricata
@ -323,7 +323,7 @@ services:
- cyberchef_local - cyberchef_local
ports: ports:
- "127.0.0.1:64299:8000" - "127.0.0.1:64299:8000"
image: "ghcr.io/telekom-security/cyberchef:2006" image: "dtagdevsec/cyberchef:2006"
read_only: true read_only: true
#### ELK #### ELK
@ -347,7 +347,7 @@ services:
mem_limit: 4g mem_limit: 4g
ports: ports:
- "127.0.0.1:64298:9200" - "127.0.0.1:64298:9200"
image: "ghcr.io/telekom-security/elasticsearch:2006" image: "dtagdevsec/elasticsearch:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -360,7 +360,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64296:5601" - "127.0.0.1:64296:5601"
image: "ghcr.io/telekom-security/kibana:2006" image: "dtagdevsec/kibana:2006"
## Logstash service ## Logstash service
logstash: logstash:
@ -373,7 +373,7 @@ services:
condition: service_healthy condition: service_healthy
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/logstash:2006" image: "dtagdevsec/logstash:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -386,7 +386,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64302:9100" - "127.0.0.1:64302:9100"
image: "ghcr.io/telekom-security/head:2006" image: "dtagdevsec/head:2006"
read_only: true read_only: true
# Ewsposter service # Ewsposter service
@ -406,7 +406,7 @@ services:
- EWS_HPFEEDS_FORMAT=json - EWS_HPFEEDS_FORMAT=json
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/ewsposter:2006" image: "dtagdevsec/ewsposter:2006"
volumes: volumes:
- /data:/data - /data:/data
- /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip
@ -434,7 +434,7 @@ services:
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304" - "127.0.0.1:64304:64304"
image: "ghcr.io/telekom-security/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
@ -452,6 +452,6 @@ services:
- spiderfoot_local - spiderfoot_local
ports: ports:
- "127.0.0.1:64303:8080" - "127.0.0.1:64303:8080"
image: "ghcr.io/telekom-security/spiderfoot:2006" image: "dtagdevsec/spiderfoot:2006"
volumes: volumes:
- /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db - /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db

26
etc/compose/medical.yml
View file

@ -26,7 +26,7 @@ services:
- dicompot_local - dicompot_local
ports: ports:
- "11112:11112" - "11112:11112"
image: "ghcr.io/telekom-security/dicompot:2006" image: "dtagdevsec/dicompot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dicompot/log:/var/log/dicompot - /data/dicompot/log:/var/log/dicompot
@ -40,7 +40,7 @@ services:
- medpot_local - medpot_local
ports: ports:
- "2575:2575" - "2575:2575"
image: "ghcr.io/telekom-security/medpot:2006" image: "dtagdevsec/medpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/medpot/log/:/var/log/medpot - /data/medpot/log/:/var/log/medpot
@ -58,7 +58,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/fatt:2006" image: "dtagdevsec/fatt:2006"
volumes: volumes:
- /data/fatt/log:/opt/fatt/log - /data/fatt/log:/opt/fatt/log
@ -67,7 +67,7 @@ services:
container_name: p0f container_name: p0f
restart: always restart: always
network_mode: "host" network_mode: "host"
image: "ghcr.io/telekom-security/p0f:2006" image: "dtagdevsec/p0f:2006"
read_only: true read_only: true
volumes: volumes:
- /data/p0f/log:/var/log/p0f - /data/p0f/log:/var/log/p0f
@ -84,7 +84,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/suricata:2006" image: "dtagdevsec/suricata:2006"
volumes: volumes:
- /data/suricata/log:/var/log/suricata - /data/suricata/log:/var/log/suricata
@ -101,7 +101,7 @@ services:
- cyberchef_local - cyberchef_local
ports: ports:
- "127.0.0.1:64299:8000" - "127.0.0.1:64299:8000"
image: "ghcr.io/telekom-security/cyberchef:2006" image: "dtagdevsec/cyberchef:2006"
read_only: true read_only: true
#### ELK #### ELK
@ -125,7 +125,7 @@ services:
mem_limit: 4g mem_limit: 4g
ports: ports:
- "127.0.0.1:64298:9200" - "127.0.0.1:64298:9200"
image: "ghcr.io/telekom-security/elasticsearch:2006" image: "dtagdevsec/elasticsearch:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -138,7 +138,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64296:5601" - "127.0.0.1:64296:5601"
image: "ghcr.io/telekom-security/kibana:2006" image: "dtagdevsec/kibana:2006"
## Logstash service ## Logstash service
logstash: logstash:
@ -151,7 +151,7 @@ services:
condition: service_healthy condition: service_healthy
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/logstash:2006" image: "dtagdevsec/logstash:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -164,7 +164,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64302:9100" - "127.0.0.1:64302:9100"
image: "ghcr.io/telekom-security/head:2006" image: "dtagdevsec/head:2006"
read_only: true read_only: true
# Ewsposter service # Ewsposter service
@ -184,7 +184,7 @@ services:
- EWS_HPFEEDS_FORMAT=json - EWS_HPFEEDS_FORMAT=json
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/ewsposter:2006" image: "dtagdevsec/ewsposter:2006"
volumes: volumes:
- /data:/data - /data:/data
- /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip
@ -212,7 +212,7 @@ services:
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304" - "127.0.0.1:64304:64304"
image: "ghcr.io/telekom-security/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
@ -230,6 +230,6 @@ services:
- spiderfoot_local - spiderfoot_local
ports: ports:
- "127.0.0.1:64303:8080" - "127.0.0.1:64303:8080"
image: "ghcr.io/telekom-security/spiderfoot:2006" image: "dtagdevsec/spiderfoot:2006"
volumes: volumes:
- /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db - /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db

72
etc/compose/nextgen.yml
View file

@ -40,7 +40,7 @@ services:
- adbhoney_local - adbhoney_local
ports: ports:
- "5555:5555" - "5555:5555"
image: "ghcr.io/telekom-security/adbhoney:2006" image: "dtagdevsec/adbhoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/adbhoney/log:/opt/adbhoney/log - /data/adbhoney/log:/opt/adbhoney/log
@ -57,7 +57,7 @@ services:
ports: ports:
- "5000:5000/udp" - "5000:5000/udp"
- "8443:8443" - "8443:8443"
image: "ghcr.io/telekom-security/ciscoasa:2006" image: "dtagdevsec/ciscoasa:2006"
read_only: true read_only: true
volumes: volumes:
- /data/ciscoasa/log:/var/log/ciscoasa - /data/ciscoasa/log:/var/log/ciscoasa
@ -70,7 +70,7 @@ services:
- citrixhoneypot_local - citrixhoneypot_local
ports: ports:
- "443:443" - "443:443"
image: "ghcr.io/telekom-security/citrixhoneypot:2006" image: "dtagdevsec/citrixhoneypot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/citrixhoneypot/logs:/opt/citrixhoneypot/logs - /data/citrixhoneypot/logs:/opt/citrixhoneypot/logs
@ -92,7 +92,7 @@ services:
ports: ports:
- "161:161" - "161:161"
- "2404:2404" - "2404:2404"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -113,7 +113,7 @@ services:
- conpot_local_guardian_ast - conpot_local_guardian_ast
ports: ports:
- "10001:10001" - "10001:10001"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -134,7 +134,7 @@ services:
- conpot_local_ipmi - conpot_local_ipmi
ports: ports:
- "623:623" - "623:623"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -156,7 +156,7 @@ services:
ports: ports:
- "1025:1025" - "1025:1025"
- "50100:50100" - "50100:50100"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -173,7 +173,7 @@ services:
ports: ports:
- "22:22" - "22:22"
- "23:23" - "23:23"
image: "ghcr.io/telekom-security/cowrie:2006" image: "dtagdevsec/cowrie:2006"
read_only: true read_only: true
volumes: volumes:
- /data/cowrie/downloads:/home/cowrie/cowrie/dl - /data/cowrie/downloads:/home/cowrie/cowrie/dl
@ -192,7 +192,7 @@ services:
- dicompot_local - dicompot_local
ports: ports:
- "11112:11112" - "11112:11112"
image: "ghcr.io/telekom-security/dicompot:2006" image: "dtagdevsec/dicompot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dicompot/log:/var/log/dicompot - /data/dicompot/log:/var/log/dicompot
@ -223,7 +223,7 @@ services:
- "5060:5060/udp" - "5060:5060/udp"
- "5061:5061" - "5061:5061"
- "27017:27017" - "27017:27017"
image: "ghcr.io/telekom-security/dionaea:2006" image: "dtagdevsec/dionaea:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp - /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp
@ -243,7 +243,7 @@ services:
- elasticpot_local - elasticpot_local
ports: ports:
- "9200:9200" - "9200:9200"
image: "ghcr.io/telekom-security/elasticpot:2006" image: "dtagdevsec/elasticpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/elasticpot/log:/opt/elasticpot/log - /data/elasticpot/log:/opt/elasticpot/log
@ -258,7 +258,7 @@ services:
network_mode: "host" network_mode: "host"
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
image: "ghcr.io/telekom-security/glutton:2006" image: "dtagdevsec/glutton:2006"
read_only: true read_only: true
volumes: volumes:
- /data/glutton/log:/var/log/glutton - /data/glutton/log:/var/log/glutton
@ -288,7 +288,7 @@ services:
- "1080:1080" - "1080:1080"
- "5432:5432" - "5432:5432"
- "5900:5900" - "5900:5900"
image: "ghcr.io/telekom-security/heralding:2006" image: "dtagdevsec/heralding:2006"
read_only: true read_only: true
volumes: volumes:
- /data/heralding/log:/var/log/heralding - /data/heralding/log:/var/log/heralding
@ -307,7 +307,7 @@ services:
- "2324:2324" - "2324:2324"
- "4096:4096" - "4096:4096"
# - "9200:9200" # - "9200:9200"
image: "ghcr.io/telekom-security/honeypy:2006" image: "dtagdevsec/honeypy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeypy/log:/opt/honeypy/log - /data/honeypy/log:/opt/honeypy/log
@ -320,7 +320,7 @@ services:
- honeysap_local - honeysap_local
ports: ports:
- "3299:3299" - "3299:3299"
image: "ghcr.io/telekom-security/honeysap:2006" image: "dtagdevsec/honeysap:2006"
volumes: volumes:
- /data/honeysap/log:/opt/honeysap/log - /data/honeysap/log:/opt/honeysap/log
@ -332,7 +332,7 @@ services:
- ipphoney_local - ipphoney_local
ports: ports:
- "631:631" - "631:631"
image: "ghcr.io/telekom-security/ipphoney:2006" image: "dtagdevsec/ipphoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/ipphoney/log:/opt/ipphoney/log - /data/ipphoney/log:/opt/ipphoney/log
@ -351,7 +351,7 @@ services:
- mailoney_local - mailoney_local
ports: ports:
- "25:25" - "25:25"
image: "ghcr.io/telekom-security/mailoney:2006" image: "dtagdevsec/mailoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/mailoney/log:/opt/mailoney/logs - /data/mailoney/log:/opt/mailoney/logs
@ -364,7 +364,7 @@ services:
- medpot_local - medpot_local
ports: ports:
- "2575:2575" - "2575:2575"
image: "ghcr.io/telekom-security/medpot:2006" image: "dtagdevsec/medpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/medpot/log/:/var/log/medpot - /data/medpot/log/:/var/log/medpot
@ -385,7 +385,7 @@ services:
- rdpy_local - rdpy_local
ports: ports:
- "3389:3389" - "3389:3389"
image: "ghcr.io/telekom-security/rdpy:2006" image: "dtagdevsec/rdpy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/rdpy/log:/var/log/rdpy - /data/rdpy/log:/var/log/rdpy
@ -398,7 +398,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/redis:2006" image: "dtagdevsec/redis:2006"
read_only: true read_only: true
## PHP Sandbox service ## PHP Sandbox service
@ -408,7 +408,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/phpox:2006" image: "dtagdevsec/phpox:2006"
read_only: true read_only: true
## Tanner API Service ## Tanner API Service
@ -420,7 +420,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/tanner:2006" image: "dtagdevsec/tanner:2006"
read_only: true read_only: true
volumes: volumes:
- /data/tanner/log:/var/log/tanner - /data/tanner/log:/var/log/tanner
@ -437,7 +437,7 @@ services:
# tty: true # tty: true
# networks: # networks:
# - tanner_local # - tanner_local
# image: "ghcr.io/telekom-security/tanner:2006" # image: "dtagdevsec/tanner:2006"
# command: tannerweb # command: tannerweb
# read_only: true # read_only: true
# volumes: # volumes:
@ -454,7 +454,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/tanner:2006" image: "dtagdevsec/tanner:2006"
command: tanner command: tanner
read_only: true read_only: true
volumes: volumes:
@ -474,7 +474,7 @@ services:
- tanner_local - tanner_local
ports: ports:
- "80:80" - "80:80"
image: "ghcr.io/telekom-security/snare:2006" image: "dtagdevsec/snare:2006"
depends_on: depends_on:
- tanner - tanner
@ -492,7 +492,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/fatt:2006" image: "dtagdevsec/fatt:2006"
volumes: volumes:
- /data/fatt/log:/opt/fatt/log - /data/fatt/log:/opt/fatt/log
@ -501,7 +501,7 @@ services:
container_name: p0f container_name: p0f
restart: always restart: always
network_mode: "host" network_mode: "host"
image: "ghcr.io/telekom-security/p0f:2006" image: "dtagdevsec/p0f:2006"
read_only: true read_only: true
volumes: volumes:
- /data/p0f/log:/var/log/p0f - /data/p0f/log:/var/log/p0f
@ -518,7 +518,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/suricata:2006" image: "dtagdevsec/suricata:2006"
volumes: volumes:
- /data/suricata/log:/var/log/suricata - /data/suricata/log:/var/log/suricata
@ -535,7 +535,7 @@ services:
- cyberchef_local - cyberchef_local
ports: ports:
- "127.0.0.1:64299:8000" - "127.0.0.1:64299:8000"
image: "ghcr.io/telekom-security/cyberchef:2006" image: "dtagdevsec/cyberchef:2006"
read_only: true read_only: true
#### ELK #### ELK
@ -559,7 +559,7 @@ services:
mem_limit: 4g mem_limit: 4g
ports: ports:
- "127.0.0.1:64298:9200" - "127.0.0.1:64298:9200"
image: "ghcr.io/telekom-security/elasticsearch:2006" image: "dtagdevsec/elasticsearch:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -572,7 +572,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64296:5601" - "127.0.0.1:64296:5601"
image: "ghcr.io/telekom-security/kibana:2006" image: "dtagdevsec/kibana:2006"
## Logstash service ## Logstash service
logstash: logstash:
@ -585,7 +585,7 @@ services:
condition: service_healthy condition: service_healthy
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/logstash:2006" image: "dtagdevsec/logstash:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -598,7 +598,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64302:9100" - "127.0.0.1:64302:9100"
image: "ghcr.io/telekom-security/head:2006" image: "dtagdevsec/head:2006"
read_only: true read_only: true
# Ewsposter service # Ewsposter service
@ -618,7 +618,7 @@ services:
- EWS_HPFEEDS_FORMAT=json - EWS_HPFEEDS_FORMAT=json
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/ewsposter:2006" image: "dtagdevsec/ewsposter:2006"
volumes: volumes:
- /data:/data - /data:/data
- /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip
@ -646,7 +646,7 @@ services:
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304" - "127.0.0.1:64304:64304"
image: "ghcr.io/telekom-security/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
@ -664,6 +664,6 @@ services:
- spiderfoot_local - spiderfoot_local
ports: ports:
- "127.0.0.1:64303:8080" - "127.0.0.1:64303:8080"
image: "ghcr.io/telekom-security/spiderfoot:2006" image: "dtagdevsec/spiderfoot:2006"
volumes: volumes:
- /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db - /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db

56
etc/compose/sensor.yml
View file

@ -37,7 +37,7 @@ services:
- adbhoney_local - adbhoney_local
ports: ports:
- "5555:5555" - "5555:5555"
image: "ghcr.io/telekom-security/adbhoney:2006" image: "dtagdevsec/adbhoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/adbhoney/log:/opt/adbhoney/log - /data/adbhoney/log:/opt/adbhoney/log
@ -54,7 +54,7 @@ services:
ports: ports:
- "5000:5000/udp" - "5000:5000/udp"
- "8443:8443" - "8443:8443"
image: "ghcr.io/telekom-security/ciscoasa:2006" image: "dtagdevsec/ciscoasa:2006"
read_only: true read_only: true
volumes: volumes:
- /data/ciscoasa/log:/var/log/ciscoasa - /data/ciscoasa/log:/var/log/ciscoasa
@ -67,7 +67,7 @@ services:
- citrixhoneypot_local - citrixhoneypot_local
ports: ports:
- "443:443" - "443:443"
image: "ghcr.io/telekom-security/citrixhoneypot:2006" image: "dtagdevsec/citrixhoneypot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/citrixhoneypot/logs:/opt/citrixhoneypot/logs - /data/citrixhoneypot/logs:/opt/citrixhoneypot/logs
@ -89,7 +89,7 @@ services:
ports: ports:
- "161:161" - "161:161"
- "2404:2404" - "2404:2404"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -110,7 +110,7 @@ services:
- conpot_local_guardian_ast - conpot_local_guardian_ast
ports: ports:
- "10001:10001" - "10001:10001"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -131,7 +131,7 @@ services:
- conpot_local_ipmi - conpot_local_ipmi
ports: ports:
- "623:623" - "623:623"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -153,7 +153,7 @@ services:
ports: ports:
- "1025:1025" - "1025:1025"
- "50100:50100" - "50100:50100"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -170,7 +170,7 @@ services:
ports: ports:
- "22:22" - "22:22"
- "23:23" - "23:23"
image: "ghcr.io/telekom-security/cowrie:2006" image: "dtagdevsec/cowrie:2006"
read_only: true read_only: true
volumes: volumes:
- /data/cowrie/downloads:/home/cowrie/cowrie/dl - /data/cowrie/downloads:/home/cowrie/cowrie/dl
@ -189,7 +189,7 @@ services:
- dicompot_local - dicompot_local
ports: ports:
- "11112:11112" - "11112:11112"
image: "ghcr.io/telekom-security/dicompot:2006" image: "dtagdevsec/dicompot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dicompot/log:/var/log/dicompot - /data/dicompot/log:/var/log/dicompot
@ -220,7 +220,7 @@ services:
- "5060:5060/udp" - "5060:5060/udp"
- "5061:5061" - "5061:5061"
- "27017:27017" - "27017:27017"
image: "ghcr.io/telekom-security/dionaea:2006" image: "dtagdevsec/dionaea:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp - /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp
@ -240,7 +240,7 @@ services:
- elasticpot_local - elasticpot_local
ports: ports:
- "9200:9200" - "9200:9200"
image: "ghcr.io/telekom-security/elasticpot:2006" image: "dtagdevsec/elasticpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/elasticpot/log:/opt/elasticpot/log - /data/elasticpot/log:/opt/elasticpot/log
@ -269,7 +269,7 @@ services:
- "1080:1080" - "1080:1080"
- "5432:5432" - "5432:5432"
- "5900:5900" - "5900:5900"
image: "ghcr.io/telekom-security/heralding:2006" image: "dtagdevsec/heralding:2006"
read_only: true read_only: true
volumes: volumes:
- /data/heralding/log:/var/log/heralding - /data/heralding/log:/var/log/heralding
@ -288,7 +288,7 @@ services:
- "2324:2324" - "2324:2324"
- "4096:4096" - "4096:4096"
# - "9200:9200" # - "9200:9200"
image: "ghcr.io/telekom-security/honeypy:2006" image: "dtagdevsec/honeypy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeypy/log:/opt/honeypy/log - /data/honeypy/log:/opt/honeypy/log
@ -301,7 +301,7 @@ services:
- honeysap_local - honeysap_local
ports: ports:
- "3299:3299" - "3299:3299"
image: "ghcr.io/telekom-security/honeysap:2006" image: "dtagdevsec/honeysap:2006"
volumes: volumes:
- /data/honeysap/log:/opt/honeysap/log - /data/honeysap/log:/opt/honeysap/log
@ -314,7 +314,7 @@ services:
network_mode: "host" network_mode: "host"
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
image: "ghcr.io/telekom-security/honeytrap:2006" image: "dtagdevsec/honeytrap:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeytrap/attacks:/opt/honeytrap/var/attacks - /data/honeytrap/attacks:/opt/honeytrap/var/attacks
@ -335,7 +335,7 @@ services:
- mailoney_local - mailoney_local
ports: ports:
- "25:25" - "25:25"
image: "ghcr.io/telekom-security/mailoney:2006" image: "dtagdevsec/mailoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/mailoney/log:/opt/mailoney/logs - /data/mailoney/log:/opt/mailoney/logs
@ -348,7 +348,7 @@ services:
- medpot_local - medpot_local
ports: ports:
- "2575:2575" - "2575:2575"
image: "ghcr.io/telekom-security/medpot:2006" image: "dtagdevsec/medpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/medpot/log/:/var/log/medpot - /data/medpot/log/:/var/log/medpot
@ -369,7 +369,7 @@ services:
- rdpy_local - rdpy_local
ports: ports:
- "3389:3389" - "3389:3389"
image: "ghcr.io/telekom-security/rdpy:2006" image: "dtagdevsec/rdpy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/rdpy/log:/var/log/rdpy - /data/rdpy/log:/var/log/rdpy
@ -382,7 +382,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/redis:2006" image: "dtagdevsec/redis:2006"
read_only: true read_only: true
## PHP Sandbox service ## PHP Sandbox service
@ -392,7 +392,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/phpox:2006" image: "dtagdevsec/phpox:2006"
read_only: true read_only: true
## Tanner API Service ## Tanner API Service
@ -404,7 +404,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/tanner:2006" image: "dtagdevsec/tanner:2006"
read_only: true read_only: true
volumes: volumes:
- /data/tanner/log:/var/log/tanner - /data/tanner/log:/var/log/tanner
@ -421,7 +421,7 @@ services:
# tty: true # tty: true
# networks: # networks:
# - tanner_local # - tanner_local
# image: "ghcr.io/telekom-security/tanner:2006" # image: "dtagdevsec/tanner:2006"
# command: tannerweb # command: tannerweb
# read_only: true # read_only: true
# volumes: # volumes:
@ -438,7 +438,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/tanner:2006" image: "dtagdevsec/tanner:2006"
command: tanner command: tanner
read_only: true read_only: true
volumes: volumes:
@ -458,7 +458,7 @@ services:
- tanner_local - tanner_local
ports: ports:
- "80:80" - "80:80"
image: "ghcr.io/telekom-security/snare:2006" image: "dtagdevsec/snare:2006"
depends_on: depends_on:
- tanner - tanner
@ -476,7 +476,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/fatt:2006" image: "dtagdevsec/fatt:2006"
volumes: volumes:
- /data/fatt/log:/opt/fatt/log - /data/fatt/log:/opt/fatt/log
@ -485,7 +485,7 @@ services:
container_name: p0f container_name: p0f
restart: always restart: always
network_mode: "host" network_mode: "host"
image: "ghcr.io/telekom-security/p0f:2006" image: "dtagdevsec/p0f:2006"
read_only: true read_only: true
volumes: volumes:
- /data/p0f/log:/var/log/p0f - /data/p0f/log:/var/log/p0f
@ -502,7 +502,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/suricata:2006" image: "dtagdevsec/suricata:2006"
volumes: volumes:
- /data/suricata/log:/var/log/suricata - /data/suricata/log:/var/log/suricata
@ -528,7 +528,7 @@ services:
- EWS_HPFEEDS_FORMAT=json - EWS_HPFEEDS_FORMAT=json
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/ewsposter:2006" image: "dtagdevsec/ewsposter:2006"
volumes: volumes:
- /data:/data - /data:/data
- /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip

68
etc/compose/standard.yml
View file

@ -37,7 +37,7 @@ services:
- adbhoney_local - adbhoney_local
ports: ports:
- "5555:5555" - "5555:5555"
image: "ghcr.io/telekom-security/adbhoney:2006" image: "dtagdevsec/adbhoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/adbhoney/log:/opt/adbhoney/log - /data/adbhoney/log:/opt/adbhoney/log
@ -53,7 +53,7 @@ services:
ports: ports:
- "5000:5000/udp" - "5000:5000/udp"
- "8443:8443" - "8443:8443"
image: "ghcr.io/telekom-security/ciscoasa:2006" image: "dtagdevsec/ciscoasa:2006"
read_only: true read_only: true
volumes: volumes:
- /data/ciscoasa/log:/var/log/ciscoasa - /data/ciscoasa/log:/var/log/ciscoasa
@ -66,7 +66,7 @@ services:
- citrixhoneypot_local - citrixhoneypot_local
ports: ports:
- "443:443" - "443:443"
image: "ghcr.io/telekom-security/citrixhoneypot:2006" image: "dtagdevsec/citrixhoneypot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/citrixhoneypot/logs:/opt/citrixhoneypot/logs - /data/citrixhoneypot/logs:/opt/citrixhoneypot/logs
@ -88,7 +88,7 @@ services:
ports: ports:
- "161:161" - "161:161"
- "2404:2404" - "2404:2404"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -109,7 +109,7 @@ services:
- conpot_local_guardian_ast - conpot_local_guardian_ast
ports: ports:
- "10001:10001" - "10001:10001"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -130,7 +130,7 @@ services:
- conpot_local_ipmi - conpot_local_ipmi
ports: ports:
- "623:623" - "623:623"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -152,7 +152,7 @@ services:
ports: ports:
- "1025:1025" - "1025:1025"
- "50100:50100" - "50100:50100"
image: "ghcr.io/telekom-security/conpot:2006" image: "dtagdevsec/conpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/conpot/log:/var/log/conpot - /data/conpot/log:/var/log/conpot
@ -169,7 +169,7 @@ services:
ports: ports:
- "22:22" - "22:22"
- "23:23" - "23:23"
image: "ghcr.io/telekom-security/cowrie:2006" image: "dtagdevsec/cowrie:2006"
read_only: true read_only: true
volumes: volumes:
- /data/cowrie/downloads:/home/cowrie/cowrie/dl - /data/cowrie/downloads:/home/cowrie/cowrie/dl
@ -188,7 +188,7 @@ services:
- dicompot_local - dicompot_local
ports: ports:
- "11112:11112" - "11112:11112"
image: "ghcr.io/telekom-security/dicompot:2006" image: "dtagdevsec/dicompot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dicompot/log:/var/log/dicompot - /data/dicompot/log:/var/log/dicompot
@ -219,7 +219,7 @@ services:
- "5060:5060/udp" - "5060:5060/udp"
- "5061:5061" - "5061:5061"
- "27017:27017" - "27017:27017"
image: "ghcr.io/telekom-security/dionaea:2006" image: "dtagdevsec/dionaea:2006"
read_only: true read_only: true
volumes: volumes:
- /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp - /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp
@ -239,7 +239,7 @@ services:
- elasticpot_local - elasticpot_local
ports: ports:
- "9200:9200" - "9200:9200"
image: "ghcr.io/telekom-security/elasticpot:2006" image: "dtagdevsec/elasticpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/elasticpot/log:/opt/elasticpot/log - /data/elasticpot/log:/opt/elasticpot/log
@ -268,7 +268,7 @@ services:
- "1080:1080" - "1080:1080"
- "5432:5432" - "5432:5432"
- "5900:5900" - "5900:5900"
image: "ghcr.io/telekom-security/heralding:2006" image: "dtagdevsec/heralding:2006"
read_only: true read_only: true
volumes: volumes:
- /data/heralding/log:/var/log/heralding - /data/heralding/log:/var/log/heralding
@ -281,7 +281,7 @@ services:
- honeysap_local - honeysap_local
ports: ports:
- "3299:3299" - "3299:3299"
image: "ghcr.io/telekom-security/honeysap:2006" image: "dtagdevsec/honeysap:2006"
volumes: volumes:
- /data/honeysap/log:/opt/honeysap/log - /data/honeysap/log:/opt/honeysap/log
@ -294,7 +294,7 @@ services:
network_mode: "host" network_mode: "host"
cap_add: cap_add:
- NET_ADMIN - NET_ADMIN
image: "ghcr.io/telekom-security/honeytrap:2006" image: "dtagdevsec/honeytrap:2006"
read_only: true read_only: true
volumes: volumes:
- /data/honeytrap/attacks:/opt/honeytrap/var/attacks - /data/honeytrap/attacks:/opt/honeytrap/var/attacks
@ -315,7 +315,7 @@ services:
- mailoney_local - mailoney_local
ports: ports:
- "25:25" - "25:25"
image: "ghcr.io/telekom-security/mailoney:2006" image: "dtagdevsec/mailoney:2006"
read_only: true read_only: true
volumes: volumes:
- /data/mailoney/log:/opt/mailoney/logs - /data/mailoney/log:/opt/mailoney/logs
@ -328,7 +328,7 @@ services:
- medpot_local - medpot_local
ports: ports:
- "2575:2575" - "2575:2575"
image: "ghcr.io/telekom-security/medpot:2006" image: "dtagdevsec/medpot:2006"
read_only: true read_only: true
volumes: volumes:
- /data/medpot/log/:/var/log/medpot - /data/medpot/log/:/var/log/medpot
@ -349,7 +349,7 @@ services:
- rdpy_local - rdpy_local
ports: ports:
- "3389:3389" - "3389:3389"
image: "ghcr.io/telekom-security/rdpy:2006" image: "dtagdevsec/rdpy:2006"
read_only: true read_only: true
volumes: volumes:
- /data/rdpy/log:/var/log/rdpy - /data/rdpy/log:/var/log/rdpy
@ -362,7 +362,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/redis:2006" image: "dtagdevsec/redis:2006"
read_only: true read_only: true
## PHP Sandbox service ## PHP Sandbox service
@ -372,7 +372,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/phpox:2006" image: "dtagdevsec/phpox:2006"
read_only: true read_only: true
## Tanner API Service ## Tanner API Service
@ -384,7 +384,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/tanner:2006" image: "dtagdevsec/tanner:2006"
read_only: true read_only: true
volumes: volumes:
- /data/tanner/log:/var/log/tanner - /data/tanner/log:/var/log/tanner
@ -401,7 +401,7 @@ services:
# tty: true # tty: true
# networks: # networks:
# - tanner_local # - tanner_local
# image: "ghcr.io/telekom-security/tanner:2006" # image: "dtagdevsec/tanner:2006"
# command: tannerweb # command: tannerweb
# read_only: true # read_only: true
# volumes: # volumes:
@ -418,7 +418,7 @@ services:
tty: true tty: true
networks: networks:
- tanner_local - tanner_local
image: "ghcr.io/telekom-security/tanner:2006" image: "dtagdevsec/tanner:2006"
command: tanner command: tanner
read_only: true read_only: true
volumes: volumes:
@ -438,7 +438,7 @@ services:
- tanner_local - tanner_local
ports: ports:
- "80:80" - "80:80"
image: "ghcr.io/telekom-security/snare:2006" image: "dtagdevsec/snare:2006"
depends_on: depends_on:
- tanner - tanner
@ -456,7 +456,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/fatt:2006" image: "dtagdevsec/fatt:2006"
volumes: volumes:
- /data/fatt/log:/opt/fatt/log - /data/fatt/log:/opt/fatt/log
@ -465,7 +465,7 @@ services:
container_name: p0f container_name: p0f
restart: always restart: always
network_mode: "host" network_mode: "host"
image: "ghcr.io/telekom-security/p0f:2006" image: "dtagdevsec/p0f:2006"
read_only: true read_only: true
volumes: volumes:
- /data/p0f/log:/var/log/p0f - /data/p0f/log:/var/log/p0f
@ -482,7 +482,7 @@ services:
- NET_ADMIN - NET_ADMIN
- SYS_NICE - SYS_NICE
- NET_RAW - NET_RAW
image: "ghcr.io/telekom-security/suricata:2006" image: "dtagdevsec/suricata:2006"
volumes: volumes:
- /data/suricata/log:/var/log/suricata - /data/suricata/log:/var/log/suricata
@ -499,7 +499,7 @@ services:
- cyberchef_local - cyberchef_local
ports: ports:
- "127.0.0.1:64299:8000" - "127.0.0.1:64299:8000"
image: "ghcr.io/telekom-security/cyberchef:2006" image: "dtagdevsec/cyberchef:2006"
read_only: true read_only: true
#### ELK #### ELK
@ -523,7 +523,7 @@ services:
mem_limit: 4g mem_limit: 4g
ports: ports:
- "127.0.0.1:64298:9200" - "127.0.0.1:64298:9200"
image: "ghcr.io/telekom-security/elasticsearch:2006" image: "dtagdevsec/elasticsearch:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -536,7 +536,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64296:5601" - "127.0.0.1:64296:5601"
image: "ghcr.io/telekom-security/kibana:2006" image: "dtagdevsec/kibana:2006"
## Logstash service ## Logstash service
logstash: logstash:
@ -549,7 +549,7 @@ services:
condition: service_healthy condition: service_healthy
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/logstash:2006" image: "dtagdevsec/logstash:2006"
volumes: volumes:
- /data:/data - /data:/data
@ -562,7 +562,7 @@ services:
condition: service_healthy condition: service_healthy
ports: ports:
- "127.0.0.1:64302:9100" - "127.0.0.1:64302:9100"
image: "ghcr.io/telekom-security/head:2006" image: "dtagdevsec/head:2006"
read_only: true read_only: true
# Ewsposter service # Ewsposter service
@ -582,7 +582,7 @@ services:
- EWS_HPFEEDS_FORMAT=json - EWS_HPFEEDS_FORMAT=json
env_file: env_file:
- /opt/tpot/etc/compose/elk_environment - /opt/tpot/etc/compose/elk_environment
image: "ghcr.io/telekom-security/ewsposter:2006" image: "dtagdevsec/ewsposter:2006"
volumes: volumes:
- /data:/data - /data:/data
- /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip
@ -610,7 +610,7 @@ services:
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304" - "127.0.0.1:64304:64304"
image: "ghcr.io/telekom-security/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
@ -628,6 +628,6 @@ services:
- spiderfoot_local - spiderfoot_local
ports: ports:
- "127.0.0.1:64303:8080" - "127.0.0.1:64303:8080"
image: "ghcr.io/telekom-security/spiderfoot:2006" image: "dtagdevsec/spiderfoot:2006"
volumes: volumes:
- /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db - /data/spiderfoot/spiderfoot.db:/home/spiderfoot/spiderfoot.db

19
iso/installer/install.sh
View file

@ -21,8 +21,8 @@ myTPOTCOMPOSE="/opt/tpot/etc/tpot.yml"
myLSB_STABLE_SUPPORTED="stretch buster" myLSB_STABLE_SUPPORTED="stretch buster"
myLSB_TESTING_SUPPORTED="stable" myLSB_TESTING_SUPPORTED="stable"
myREMOTESITES="https://hub.docker.com https://github.com https://pypi.python.org https://debian.org https://listbot.sicherheitstacho.eu" myREMOTESITES="https://hub.docker.com https://github.com https://pypi.python.org https://debian.org https://listbot.sicherheitstacho.eu"
myPREINSTALLPACKAGES="aria2 apache2-utils cracklib-runtime curl dialog figlet fuse grc libcrack2 libpq-dev lsb-release netselect-apt net-tools software-properties-common toilet" myPREINSTALLPACKAGES="aria2 apache2-utils cracklib-runtime curl dialog figlet fuse grc libcrack2 libpq-dev lsb-release net-tools software-properties-common toilet"
myINSTALLPACKAGES="aria2 apache2-utils apparmor apt-transport-https aufs-tools bash-completion build-essential ca-certificates cgroupfs-mount cockpit cockpit-docker console-setup console-setup-linux cracklib-runtime curl debconf-utils dialog dnsutils docker.io docker-compose ethtool fail2ban figlet genisoimage git glances grc haveged html2text htop iptables iw jq kbd libcrack2 libltdl7 libpam-google-authenticator man mosh multitail netselect-apt net-tools npm ntp openssh-server openssl pass pigz prips software-properties-common syslinux psmisc pv python3-pip toilet unattended-upgrades unzip vim wget wireless-tools wpasupplicant" myINSTALLPACKAGES="aria2 apache2-utils apparmor apt-transport-https aufs-tools bash-completion build-essential ca-certificates cgroupfs-mount cockpit cockpit-docker console-setup console-setup-linux cracklib-runtime curl debconf-utils dialog dnsutils docker.io docker-compose ethtool fail2ban figlet genisoimage git glances grc haveged html2text htop iptables iw jq kbd libcrack2 libltdl7 libpam-google-authenticator man mosh multitail net-tools npm ntp openssh-server openssl pass pigz prips software-properties-common syslinux psmisc pv python3-pip toilet unattended-upgrades unzip vim wget wireless-tools wpasupplicant"
myINFO="\ myINFO="\
########################################### ###########################################
### T-Pot Installer for Debian (Stable) ### ### T-Pot Installer for Debian (Stable) ###
@ -290,21 +290,6 @@ function fuCHECKNET {
# Install T-Pot dependencies # Install T-Pot dependencies
function fuGET_DEPS { function fuGET_DEPS {
export DEBIAN_FRONTEND=noninteractive export DEBIAN_FRONTEND=noninteractive
# Determine fastest mirror
echo
echo "### Determine fastest mirror for your location."
echo
netselect-apt -n -a amd64 stable && cp sources.list /etc/apt/
mySOURCESCHECK=$(cat /etc/apt/sources.list | grep -c stable)
if [ "$mySOURCESCHECK" == "0" ]
then
echo "### Automatic mirror selection failed, using main mirror."
# Point to Debian (stable)
tee /etc/apt/sources.list <<EOF
deb http://deb.debian.org/debian stable main contrib non-free
deb-src http://deb.debian.org/debian stable main contrib non-free
EOF
fi
echo echo
echo "### Getting update information." echo "### Getting update information."
echo echo

2
iso/preseed/tpot.seed
View file

@ -109,7 +109,7 @@ tasksel tasksel/first multiselect ssh-server
######################## ########################
### Package Installation ### Package Installation
######################## ########################
d-i pkgsel/include string apache2-utils cracklib-runtime curl dialog figlet git grc libcrack2 libpq-dev lsb-release netselect-apt net-tools software-properties-common toilet d-i pkgsel/include string apache2-utils cracklib-runtime curl dialog figlet git grc libcrack2 libpq-dev lsb-release net-tools software-properties-common toilet
popularity-contest popularity-contest/participate boolean false popularity-contest popularity-contest/participate boolean false
################# #################

2
update.sh
View file

@ -183,7 +183,7 @@ function fuUPDATER () {
export DEBIAN_FRONTEND=noninteractive export DEBIAN_FRONTEND=noninteractive
echo "### Installing apt-fast" echo "### Installing apt-fast"
/bin/bash -c "$(curl -sL https://raw.githubusercontent.com/ilikenwf/apt-fast/master/quick-install.sh)" /bin/bash -c "$(curl -sL https://raw.githubusercontent.com/ilikenwf/apt-fast/master/quick-install.sh)"
local myPACKAGES="aria2 apache2-utils apparmor apt-transport-https aufs-tools bash-completion build-essential ca-certificates cgroupfs-mount cockpit cockpit-docker console-setup console-setup-linux cracklib-runtime curl debconf-utils dialog dnsutils docker.io docker-compose ethtool fail2ban figlet genisoimage git glances grc haveged html2text htop iptables iw jq kbd libcrack2 libltdl7 libpam-google-authenticator man mosh multitail netselect-apt net-tools npm ntp openssh-server openssl pass pigz prips software-properties-common syslinux psmisc pv python3-elasticsearch-curator python3-pip toilet unattended-upgrades unzip vim wget wireless-tools wpasupplicant" local myPACKAGES="aria2 apache2-utils apparmor apt-transport-https aufs-tools bash-completion build-essential ca-certificates cgroupfs-mount cockpit cockpit-docker console-setup console-setup-linux cracklib-runtime curl debconf-utils dialog dnsutils docker.io docker-compose ethtool fail2ban figlet genisoimage git glances grc haveged html2text htop iptables iw jq kbd libcrack2 libltdl7 libpam-google-authenticator man mosh multitail net-tools npm ntp openssh-server openssl pass pigz prips software-properties-common syslinux psmisc pv python3-elasticsearch-curator python3-pip toilet unattended-upgrades unzip vim wget wireless-tools wpasupplicant"
# Remove purge in the future # Remove purge in the future
echo "### Removing repository based install of elasticsearch-curator" echo "### Removing repository based install of elasticsearch-curator"
apt-get purge elasticsearch-curator -y apt-get purge elasticsearch-curator -y