Commit graph

2093 commits

Author SHA1 Message Date
t3chn0m4g3
540d5574d1 cleanup, tweaking, updating
make tpotinit aware of sigterm events to unload blackhole routes, firewall rules
fixes #1204 where citrixhoneypot logs use logs instead of log folder
bump ELK stack to 8.12.2
add wordpot logs to logstash pipeline
bump t-pot attackmap to 2.2.0, alpine 3.19
2024-03-12 17:03:43 +01:00
t3chn0m4g3
1da35284be update, tweaking, add
add wordpot incl. json logging with activated plugins
bump snare, tanner, phpox, tanner_redis to latest master and to alpine 3.19
2024-03-11 17:33:53 +01:00
t3chn0m4g3
4baac7ac04 update esvue, cleanup 2024-03-11 09:45:01 +01:00
t3chn0m4g3
97adcbeb1b tweaking
updating .env, env.example and compose files regarding sentrypeer ENVs
make glutton image aware of payloads feature
bump glutton to latest master, alpine 3.19, multi-stage build
bump ipphoney to alpine 3.19
bump mailoney to alpine 3.19, adjust for py3
revert medpot to previous master, use multi stage build and alpine 3.19
bump cyberchef to latest master
bump ngninx to alpine 3.19
bump p0f to alpine 3.19, use multi stage build
bump redishoneypot to alpine 3.19, use multi stage build
bump sentrypeer to latest master, fix bug for open ports in compose files, now all tcp/5060, udp/5060 traffic will be seen
bump spiderfoot to latest master
bump spiderfoot to alpine 3.19
bump suricata to 7.0.2, fix performance issue with capture-filter-bpf by reducing the rules
update clean.sh to include glutton payloads folder
2024-03-09 12:11:14 +01:00
t3chn0m4g3
c45870594b tweaking
multi stage build for dicompot
rebuild fatt, glutton, hellpot, honeypots for alpine 3.19
bump glutton, hellpot, honeypots to latest master
2024-03-05 19:50:35 +01:00
Marco Ochse
932ad6b27c
Fix repack for AMD64 .iso (#1481) 2024-03-04 15:23:27 +01:00
t3chn0m4g3
519a101fdf tweaking 2024-02-28 21:05:03 +01:00
t3chn0m4g3
be74fc75ca tweaking
healthcheck, watch pid not cpu
cleanup dockerfiles
bump dicompot, heralding, elasticpot, endlessh to alpine 3.19
bump dionaea, heralding to latest master
2024-02-28 19:07:22 +01:00
t3chn0m4g3
285b37a00d cleanup 2024-02-27 20:28:07 +01:00
t3chn0m4g3
f9a9c8c4bf tweak deploy, add autoheal, start update Dockerfiles
- tweak deploy a little further
- start with rebuilding Dockerfiles
- rework healthcheck for adbhoney CPU issues
- bump adbhoney, ciscoasa, citrixhoneypot, conpot, cowriepot, ddospot to alpine 3.19
- fix conpot issue with py 3.11
- bump conpot to latest master
- bump cowrie to latest master
- add autoheal to tpotinit to restart unhealthy container (if healthcheck enabled)
2024-02-27 20:23:30 +01:00
Marco Ochse
22d2bdff7e update .env 2024-02-23 20:41:58 +01:00
t3chn0m4g3
2723becd96 continue work on sensor deploy 2024-02-23 20:30:12 +01:00
t3chn0m4g3
127f0c2c92 point installer and ansible to alpha 2024-02-23 17:30:36 +01:00
t3chn0m4g3
31f09413e0 continue working on env, tpotinit and deploy 2024-02-23 16:41:52 +01:00
t3chn0m4g3
72fd6d963b start rework env, sensor deploy 2024-02-22 19:09:52 +01:00
Marco Ochse
a4262e9aae Add SENSOR type to installer with info to deploy from HIVE. 2024-02-21 16:20:18 +01:00
t3chn0m4g3
4f41b84103 Adjust T-Pot config file, tpotinit
fix logrotate.conf path
add tpotinit logging
add support for LS_WEB_USER in tpot config (.env)
make tpotinit always validate config / adjust users on tpotinit start
2024-02-19 17:34:14 +01:00
Marco Ochse
09b75cb5be Start working on new landing page
Remove old code
2024-02-16 19:32:02 +01:00
Marco Ochse
0dda858ac1 Start working on new landing page
Remove old code
2024-02-16 19:15:17 +01:00
Marco Ochse
0c9b58b6ac Remove Cockpit 2024-02-15 18:32:16 +01:00
Marco Ochse
380ade13a3 make heralding work with py3.10+ 2024-02-14 22:47:41 +01:00
Marco Ochse
e94f70a15f Revert to medpot (75a2e6134cf926c35b6017d62542274434c87388) from 2 years ago since current master is broken. 2024-02-14 21:14:40 +01:00
Marco Ochse
8bbfe7ac62 Fix manuf location 2024-02-14 20:16:13 +01:00
Marco Ochse
7ae6c73b88 Testing and developing in alpha branch 2024-02-14 19:23:25 +01:00
t3chn0m4g3
efd5465837 work on permissions, folders and tpotinit 2024-02-14 19:04:05 +01:00
Marco Ochse
ef2f5b3f93 Rework .env / env.example
Add more functions to customizer.py (improve port and service checks, improve user output)
Adjust docker-compose files
2024-02-13 19:02:40 +01:00
Marco Ochse
e7aecf560d Add T-Pot Service Builder 2024-02-12 19:18:57 +01:00
Marco Ochse
bd4df39538
fix missing replace for x86_64 > amd64
thanks to @shark4ce for taking the time to test, debug and offer a solution #1472.
2024-02-06 13:45:12 +01:00
t3chn0m4g3
2fe2d59129 remove auto reload 2024-01-05 22:07:19 +01:00
t3chn0m4g3
7ba5567e70 add logstash http_input support for nginx
remove cockpit support entirely
cleanup / housekeeping
2024-01-05 21:31:13 +01:00
t3chn0m4g3
0f7dc73f1a provide better example 2024-01-05 20:28:39 +01:00
t3chn0m4g3
1da37b5f85 re-implement distributed feature, without ssh
add sensor compose file
add distributed option to tpot config
housekeeping / cleanup
2024-01-05 20:19:50 +01:00
Marco Ochse
c634d294c7
Update .env 2024-01-05 12:00:36 +01:00
t3chn0m4g3
908ca2a45b update builder 2023-12-11 11:04:51 +01:00
t3chn0m4g3
faec613b9a add persistence to ENVs
add ENVs checker to keep tpotinit from starting if ENVs are not present or incorrectly set
2023-12-08 18:00:09 +01:00
t3chn0m4g3
406a7314ee fix logrotate config, fix version 2023-12-07 18:44:24 +01:00
Marco Ochse
cf91caaf8c
fix alias 2023-11-01 16:19:24 +01:00
Marco Ochse
13326985a9
Add support for Raspbian (64 Bit) 2023-11-01 15:51:56 +01:00
Marco Ochse
15d65dbc25
Add Raspbian as supported OS (64 Bit) 2023-11-01 15:50:16 +01:00
Marco Ochse
05bdfd3855
Update ansible installer 2023-11-01 14:13:16 +01:00
Marco Ochse
5ebeffe31c
Finetune raspberry_showcase.yml 2023-10-31 17:33:40 +01:00
Marco Ochse
5ca4136ebe
add citation 2023-08-28 10:38:40 +02:00
Marco Ochse
02098f9b76
Update Citation 2023-08-28 10:29:24 +02:00
Marco Ochse
649163e06f
Update Citation 2023-08-28 10:16:18 +02:00
Marco Ochse
9d66bcb7d3
Add Bibtex, closes #1398 2023-08-28 10:02:59 +02:00
Marco Ochse
dc4384d6ab
Merge pull request #1369 from swiftsolves-msft/pr-azure
Azure Deployment via ARM template
2023-08-22 13:36:09 +02:00
Marco Ochse
90fa3b30e9 Update 2023-07-22 11:55:10 +02:00
Marco Ochse
32ba41497a Update 2023-07-20 19:16:10 +02:00
Marco Ochse
d2eaaab4df Update builder to push to GHCR and DockerHub 2023-07-20 18:59:01 +02:00
Marco Ochse
a8f5555324 - Prepare a docker compose file for a Raspberry Showcase
- Add config settings for the T-Pot Attack Map 2.1.0
2023-07-20 18:41:56 +02:00