Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-04-20 06:02:24 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
2065 commits 8 branches 18 tags 388 MiB
Commit graph

734 commits

Author SHA1 Message Date
t3chn0m4g3
5bbe07de9e fix dep 2022-03-25 14:52:28 +00:00
t3chn0m4g3
328139d9b9 image builder, tweaking 2022-03-24 18:54:56 +01:00
t3chn0m4g3
e2752458d4 bump elk to 7.17.0 to support 8.0.1 in 22.x 2022-03-18 16:23:27 +00:00
t3chn0m4g3
b7096d6df6 bump elk to 8.0.1 2022-03-18 07:58:00 +00:00
t3chn0m4g3
dd5f2c2a8d reduce build times, tweaking 2022-03-14 21:50:19 +00:00
t3chn0m4g3
9a0e6bf1d8 tweaking process cpu 2022-03-14 10:37:11 +00:00
t3chn0m4g3
3bcf85a92f tweaking, reduce build times 2022-03-13 10:19:08 +00:00
t3chn0m4g3
e87a6fa53f heralding, honeypots reduce build time, tweaking 2022-03-12 17:59:31 +00:00
t3chn0m4g3
a0d82ddc45 tweaking, reduce build times 2022-03-12 15:11:20 +00:00
t3chn0m4g3
1974a7e6ab cowrie, ddospot, reduce build times, tweaking 2022-03-12 14:42:34 +00:00
t3chn0m4g3
96d5986407 cowrie, test reduce build times 2022-03-12 14:27:34 +00:00
t3chn0m4g3
f39b371d6b tweaking 2022-03-12 13:27:28 +00:00
t3chn0m4g3
ae52dafdaf conpot, test reduce build times 2022-03-12 13:13:31 +00:00
t3chn0m4g3
886a7f159e add /modify cpu healtchecks for adbhoney, conpot, dionaea 2022-03-11 18:02:20 +00:00
t3chn0m4g3
068f4bb67e adbhoney add healtcheck for CPU usage, tweaking 2022-03-11 13:29:44 +00:00
Marco Ochse
0a8ff0297f tweaking 2022-03-09 23:07:28 +01:00
t3chn0m4g3
4bcd24ed19 tweaking 2022-03-09 20:46:12 +00:00
t3chn0m4g3
99c719eed4 bump conpot to latest master, cleanup 2022-03-09 15:19:51 +00:00
t3chn0m4g3
9d7c24892d image tweaking 2022-03-08 23:36:03 +00:00
t3chn0m4g3
22904d402a drop root privileges for suricata 2022-03-08 17:29:03 +00:00
t3chn0m4g3
02d4d79a60 tweaking 2022-03-05 00:50:47 +00:00
t3chn0m4g3
075551d218 harden, reduce size log4pot 2022-03-04 13:13:48 +00:00
t3chn0m4g3
3b65fb039b bump log4pot to latest master 2022-03-04 11:45:25 +00:00
t3chn0m4g3
518c56def9 spiderfoot, editions tweaking 2022-02-28 22:00:54 +00:00
t3chn0m4g3
c496b274f3 fix entrypoint 2022-02-25 17:14:42 +00:00
t3chn0m4g3
3d0d69c541 tweaking, license info, readme credits, avoid redis port conflict 2022-02-25 16:59:17 +00:00
t3chn0m4g3
8f8bdcbefa fix expose from parent 2022-02-25 13:47:00 +00:00
t3chn0m4g3
5237215bf0 tweaking, add sentrypeer to logstash config 2022-02-24 17:39:57 +00:00
t3chn0m4g3
aa6afc37fe prep for sentrypeer 2022-02-23 23:19:18 +00:00
t3chn0m4g3
8d16d7587d add sentrypeer, wordpot tweaking, fix udp src_ip issues 2022-02-22 17:57:55 +00:00
t3chn0m4g3
af2174ee9f fix websocket timeout 2022-02-21 11:43:41 +00:00
t3chn0m4g3
fc7c748b20 add attack map to web gui 2022-02-20 23:11:24 +00:00
t3chn0m4g3
656c99446e fix template 2022-02-20 16:38:15 +00:00
t3chn0m4g3
a73c4b67d9 reduce index refresh to 1s 2022-02-18 19:55:31 +00:00
t3chn0m4g3
416d4a810f redis tweaking 2022-02-17 01:26:10 +00:00
t3chn0m4g3
7ee263e8e8 bump elastic stack to 8.0.0 2022-02-16 02:55:20 +00:00
t3chn0m4g3
17a1cbdf40 update map 2022-02-15 21:46:43 +00:00
t3chn0m4g3
e9a907ef7b tweaking 2022-02-14 00:35:37 +00:00
t3chn0m4g3
e1643308b2 tweaking 2022-02-14 00:32:57 +00:00
t3chn0m4g3
264120c751 bump map_server to latest master 2022-02-14 00:30:18 +00:00
t3chn0m4g3
6fed549f58 map server tweaking 2022-02-12 01:04:02 +00:00
t3chn0m4g3
53afb1ba10 incl. XFF for qhoneypots, some tweaking 2022-02-11 10:32:31 +00:00
t3chn0m4g3
2a4fe20b88 work in progress (map, wordpot) 2022-02-09 19:13:18 +00:00
t3chn0m4g3
278c7aa61a bump elastic stack to 7.17.0 2022-02-02 22:57:50 +00:00
t3chn0m4g3
b37178ba98 tweaking honeysap, rdpy, editions, installer 
move honeysap, rdpy to deprecated as currently no Py3 version available
remove honeysap, rdpy from editions
adjust installer for running on ARM64 (post-install)
 2022-01-31 16:59:36 +00:00
t3chn0m4g3
778c6c6a70 tweak cyberchef size by removing zip 2022-01-30 01:07:12 +00:00
t3chn0m4g3
72289e07d6 tweaking for nginx, cyberchef, elasticvue 
create builder for cyberchef and elasticvue based on respective masters
builders will build webapps and copy output to nginx html folder as tgz
some tweaking for elasticvue to properly load original favicon
with cyberchef now run as nginx webapp we gain another 40MB of RAM
while webapps will be built on AMD64 all final docker images can now be built as multi arch images for AMD64 and ARM64
 2022-01-30 00:48:10 +00:00
t3chn0m4g3
a51744988f adjust editions for new nginx 2022-01-29 00:45:41 +00:00
t3chn0m4g3
e6f392a098 Tweaking 
Finalize qhoneypots config, thanks to @giga-a for native JSON logging!
Completely rework T-Pot Landing Page based on Bento (https://github.com/migueravila/Bento).
New NGINX image is down by 100MB and only uses 3.3 MB of RAM at runtime.
Keep legacy Sensor option (without logstash).
 2022-01-29 00:00:29 +00:00
t3chn0m4g3
12a413b4cb replace es-head with elasticvue, tweaking 
es-head does not support building with ARM64 and had to be replaced with the even better elasticvue
elasticvue will now run within the nginx container, freeing some RAM :) on the way
 2022-01-27 02:39:23 +00:00
t3chn0m4g3
6a277fd1e9 dionaea: adjust for multiarch builds 2022-01-24 01:31:31 +00:00
t3chn0m4g3
cfcf870da3 elasticsearch, kibana: prep for multiarch, move to ubuntu 
heade: alpine 3.15
 2022-01-23 21:12:34 +00:00
t3chn0m4g3
a507bc5f39 logstash cleanup, prep for multiarch, move to ubuntu 
log4pot tweaking
 2022-01-23 14:49:07 +00:00
t3chn0m4g3
ae18cb592e tweaking, prep for docker buildx 2022-01-22 01:04:21 +00:00
t3chn0m4g3
ef31fc155b re-add FROMURL example for Suricata in compose files 2022-01-20 18:34:51 +00:00
t3chn0m4g3
3524bafda2 Cleanup, Tweaking 
Remove old Sensor Edition and replace with Pot Edition
Rename Pot Edition to new Sensor Edition
POT is now called SENSOR
 2022-01-20 18:26:43 +00:00
t3chn0m4g3
66b4ef047a bump tanner to latest master, alpine 3.15 2022-01-20 17:47:29 +00:00
t3chn0m4g3
2586e10285 Bump Mailoney to Alpine 3.15, reduced to Mailoney Code, no PyPi 2022-01-20 16:31:40 +00:00
t3chn0m4g3
602d1cc673 bump Elastic Stack to 7.16.3, change deprecated fields 2022-01-20 10:32:10 +00:00
t3chn0m4g3
22acb6fa84 bump to Alpine 3.15 2022-01-19 00:46:04 +00:00
t3chn0m4g3
2a7ff7b3cb update Dockerfiles 2022-01-18 01:10:20 +00:00
t3chn0m4g3
889c85e248 update Dockerfiles 2022-01-18 00:50:23 +00:00
t3chn0m4g3
d301cf0447 tweaking, remove honeypy => deprecated 2022-01-17 17:45:03 +00:00
t3chn0m4g3
c611101987 improve nginx logging 2022-01-17 17:15:04 +00:00
Marco Ochse
cac7cdcec6 fix data fields with regard to the request field, log4pot, nginx 2022-01-17 17:10:48 +01:00
t3chn0m4g3
a07918d149 update log4pot to the latest master 2022-01-17 14:52:32 +00:00
t3chn0m4g3
68d6aa4180 fix data fields with regard to the request field, log4pot, nginx 2022-01-17 14:50:50 +00:00
t3chn0m4g3
0e5986d2df Tweaking 
Remove Elasticsearch-Curator in packages, configs and references (BREAKING CHANGE)
Add Index Lifecycle Management in favor of elasticsearch-curator
Point all images to 2203 tags
 2022-01-14 15:52:08 +00:00
t3chn0m4g3
86479db8af fix packaging 2022-01-14 13:05:05 +00:00
t3chn0m4g3
eca395a770 fix packaging 2022-01-14 12:54:53 +00:00
t3chn0m4g3
3792a5f6a1 fix packaging 2022-01-14 12:51:15 +00:00
t3chn0m4g3
e7e521edba tweaking 2022-01-12 01:28:06 +00:00
t3chn0m4g3
7d012726b7 tweaking 2022-01-11 15:43:45 +00:00
t3chn0m4g3
d6ea4cdde2 prep for elk 8.x, pave way for next t-pot release 2022-01-07 18:03:00 +00:00
t3chn0m4g3
fb49a77180 tweaking, json_batch transfer to hive 2022-01-07 15:41:57 +00:00
t3chn0m4g3
467dfae320 cleanup, move to correct folders 2022-01-04 18:35:44 +00:00
t3chn0m4g3
788a4c4f98 prepare for new attack map feature 
tweaking, cleanup
 2022-01-04 16:16:27 +00:00
t3chn0m4g3
68b080a3a8 Work in progress! 
This is the foundation for the distributed T-Pot feature,
highly work in progress, only works with local docker image builds,
will be available for prod for upcoming T-Pot 22xx.
 2022-01-03 18:24:17 +00:00
t3chn0m4g3
ef1a1fa057 Merge branch 'master' of https://github.com/telekom-security/tpotce 2021-12-21 11:37:18 +00:00
t3chn0m4g3
daf41b4b71 tweaking 2021-12-21 11:36:38 +00:00
t3chn0m4g3
0bca794fe7 bump log4pot to latest master 
rebuild on ubuntu for payload download support
 2021-12-20 18:40:38 +00:00
t3chn0m4g3
aaccb43471 bump elk stack to 7.16.2 
ELK 7.16.2 includes log4j 2.17.0 to address latest issues
 2021-12-20 11:17:18 +00:00
t3chn0m4g3
b0339610a2 Prep for Log4Pot integration 2021-12-16 20:25:40 +00:00
t3chn0m4g3
a98b447556 ELK 7.16.1 fixes log4j vulns. 2021-12-13 15:59:48 +00:00
t3chn0m4g3
b4c1805551 disable log4j lookups 2021-12-13 10:54:07 +00:00
t3chn0m4g3
0ef2e89cac remove log4j JndiLookup Class 2021-12-13 10:35:22 +00:00
t3chn0m4g3
5f29516197 tweaking 2021-12-08 23:55:13 +00:00
Marco Ochse
ff1c12e848
Disable FATT submissions for now 2021-11-30 16:04:58 +01:00
t3chn0m4g3
ce39e1bd4f logstash logging for honeypots 2021-11-19 23:20:13 +00:00
t3chn0m4g3
6c155ad87f add qeeqbox honeypots 2021-11-18 19:55:44 +00:00
t3chn0m4g3
81b8242c68 bump ewsposter to latest master 2021-11-18 13:48:02 +00:00
t3chn0m4g3
d2cbf6ebbc build fix for tanner 2021-11-18 13:39:05 +00:00
Marco Ochse
591be0791b
Fixes #939 
https://stackoverflow.com/questions/28785383/how-to-disable-persistence-with-redis
 2021-11-18 13:05:01 +01:00
t3chn0m4g3
adee51bee5 bump heralding to latest master 2021-11-16 18:23:25 +00:00
t3chn0m4g3
b214db6e9d bump cowrie to 2.3.0, ewsposter to 1.21 2021-11-05 17:43:47 +00:00
t3chn0m4g3
c9b909e51d finetune new honeypots logging 2021-11-02 19:13:28 +00:00
t3chn0m4g3
db74c610ad bump hellpot to 0.3 and train config for CVE-2021-39341 2021-11-01 13:36:44 +00:00
t3chn0m4g3
ea624351b5 finetuning logstash.conf for new honeypots 2021-10-29 16:28:16 +00:00
t3chn0m4g3
c1eb9f7216 logstash parsing for ddospot, hellpot 2021-10-28 18:57:55 +00:00
t3chn0m4g3
1a844d13ba start integrating new honeypots into ELK 2021-10-27 16:14:52 +00:00
t3chn0m4g3
348a5d572b bump elastic stack to 7.15.1 2021-10-26 13:56:38 +00:00
t3chn0m4g3
77dcd771df move debian to ubuntu 20.04 2021-10-05 15:26:02 +00:00
t3chn0m4g3
b566b39688 move honeytrap to ubuntu 20.04 
thanks to @adepasquale's work
 2021-10-04 20:19:40 +00:00
t3chn0m4g3
dd7fb325b6 add new honeypots to nextgen to prep for ELK setup 
honeytrap testing
 2021-10-01 16:18:10 +00:00
t3chn0m4g3
ab092faa2c prep conpot rebuild 2021-10-01 15:10:37 +00:00
t3chn0m4g3
28681ef398 prep heralding rebuild 2021-10-01 14:32:24 +00:00
t3chn0m4g3
eefd38a335 bump elastic stack to 7.15.0 
no image upgrade before 7.15.1
 2021-09-30 20:40:42 +00:00
t3chn0m4g3
261b380db7 cleaup fatt, bump suricata to 6.0.3 2021-09-30 19:39:59 +00:00
t3chn0m4g3
77e2dd2da6 cleanup spiderfoot, prep fatt rebuild 2021-09-30 19:14:11 +00:00
t3chn0m4g3
183136c1f1 bump spiderfoot to v3.4 2021-09-30 17:03:28 +00:00
t3chn0m4g3
1fe0247095 prep p0f, medpot for image rebuild 2021-09-30 15:58:10 +00:00
t3chn0m4g3
adab02a067 prep for updated nginx image 2021-09-28 19:51:08 +00:00
t3chn0m4g3
58aa3162cb prep for ewsposter fix 2021-09-28 15:58:15 +00:00
t3chn0m4g3
405ee521a6 prep ubuntu rebuild for honeytrap 2021-09-24 17:09:55 +00:00
t3chn0m4g3
9a3465aef1 bump cowrie to latest master, prep for rebuild 2021-09-24 17:03:55 +00:00
t3chn0m4g3
e23c57e58d some tests with dionaea 2021-09-24 16:10:14 +00:00
t3chn0m4g3
44749fe9e7 bump honeysap to alpine3.11 2021-09-24 15:47:05 +00:00
t3chn0m4g3
f5d11bb008 bump snare, tanner, prep for rebuild 2021-09-24 15:18:59 +00:00
t3chn0m4g3
efa9d991ba revert honeypy to alpine 2021-09-23 22:28:33 +00:00
t3chn0m4g3
a7faafeba9 test mailoney 2021-09-23 21:50:37 +00:00
t3chn0m4g3
f05abc07c9 cleanup 2021-09-23 21:20:25 +00:00
t3chn0m4g3
eeae863820 revert to alpine 2021-09-23 21:11:24 +00:00
t3chn0m4g3
9f9d1a65bd debian test 2021-09-23 20:53:38 +00:00
t3chn0m4g3
a48840d1b2 prep rdpy for debian rebuild 2021-09-23 20:15:33 +00:00
t3chn0m4g3
48de3d846c fix typo in crontab 2021-09-23 10:00:20 +00:00
t3chn0m4g3
122135dd80 prepare rebuilding dicompot 2021-09-20 21:57:39 +00:00
t3chn0m4g3
8576e576a6 prep mailoney for rebuild 2021-09-20 20:20:04 +00:00
t3chn0m4g3
32e1e8a8ea prep for rebuilding ciscoasa, elasticpot, honeypy 2021-09-20 16:08:16 +00:00
t3chn0m4g3
ed224215a4 tweak cyberchef image for better security, prep citrixhoneypot for rebuild 2021-09-20 14:29:42 +00:00
t3chn0m4g3
e9c03e512c prep rebuild for adbhoney, cyberchef 2021-09-20 09:15:28 +00:00
t3chn0m4g3
ed0c5aa89f add logstash-output-gelf, fixes #861 2021-09-15 17:39:04 +00:00
t3chn0m4g3
9de1bdd0b5 tweaking, bump elastic stack to 7.14.1, rebuild dashboards 2021-09-15 15:58:44 +00:00
t3chn0m4g3
06ef8850fe prep for ELK 7.13.4, start full integration of new honeypots 2021-08-25 15:04:27 +00:00
t3chn0m4g3
2aa4c3c2c6 disable ntp server on host, start working on ddospot 2021-07-09 23:16:19 +00:00
t3chn0m4g3
0867d8f011 prep for redishoneypot 2021-07-05 19:59:44 +00:00
t3chn0m4g3
a2071eb4d2 hellpot cleanup and prep for endlessh 2021-07-03 15:51:32 +00:00
t3chn0m4g3
e6402b793c start including hellpot 2021-07-02 22:12:47 +00:00
t3chn0m4g3
4cb84166c5 bump ewsposter to 1.2.0, elk stack to 7.13.2 2021-06-28 16:30:40 +00:00
t3chn0m4g3
b6be931641 prep for new ewsposter, rollout to follow next week 2021-06-24 16:26:53 +00:00
t3chn0m4g3
f51ab7ec0f prepare to bump elastic stack to 7.13.1 2021-06-10 17:03:22 +00:00
t3chn0m4g3
de38e5e86f Rebuild Logstash, Elasticsearch 
Setting static limits for Elasticsearch / Logstash on Xms, Xmx and Container RAM results in unwanted side effects for some installations. With Elastic supporting dynamic heap management for Java 14+ we now use OpenJDK 16 JRE and as such remove limitations. This should improve stability for T-Pot, provided the minimum requirements will be met.
 2021-05-26 11:00:49 +00:00
t3chn0m4g3
0c5ab33b8a bump elastic stack to 7.12.1 2021-05-17 16:32:03 +00:00
trixam
60e57bce52
Update update.sh 
Adding quotation marks for $URL
 2021-05-03 14:40:08 +02:00
trixam
dceaa984c9
Update update.sh 
Download rules via URL
 2021-04-21 12:44:36 +02:00
t3chn0m4g3
532907c27c rebuild honeytrap 2021-02-25 11:57:16 +00:00
t3chn0m4g3
fb860fb861 fix protocols for conpot testing 2021-02-25 11:55:51 +00:00
t3chn0m4g3
7d423f29da rebuild snare, tanner, redis, phpox 2021-02-19 13:02:08 +00:00
t3chn0m4g3
d5f0ceb15b push elastic stack to 7.11.1 2021-02-19 10:17:30 +00:00
t3chn0m4g3
5f38e730d4 rebuild conpot for latest alpine edge, bump to latest master 2021-02-18 17:39:52 +00:00
t3chn0m4g3
c48ad0863d bump ewsposter to latest master 2021-02-18 16:52:43 +00:00
t3chn0m4g3
4bc2b1bf03 rebuild cowrie for alpine 3.13 2021-02-18 16:38:35 +00:00
t3chn0m4g3
3d123f35a4 rebuild glutton for alpine 3.13, update to latest master 2021-02-18 11:12:21 +00:00
t3chn0m4g3
d4519892f6 rebuild dionaea 2021-02-18 10:37:17 +00:00
t3chn0m4g3
69c535619d bump heralding to 1.0.7 and rebuild for alpine 1.13 2021-02-16 16:59:17 +00:00
t3chn0m4g3
5fe59c3bd8 rebuild ipphoney for alpine 3.13 2021-02-16 16:14:37 +00:00
t3chn0m4g3
d8d0a6f190 rebuild fatt for alpine 3.13 2021-02-16 13:27:56 +00:00
t3chn0m4g3
4d407b420d rebuild ewsposter for alpine 3.13 2021-02-16 13:15:26 +00:00
t3chn0m4g3
181e3585b7 bump spiderfoot to 3.3 and rebuild for alpine 3.13 2021-02-16 11:01:43 +00:00
t3chn0m4g3
2597af73ee rebuild dicompot for alpine 3.13 2021-02-15 12:34:11 +00:00
t3chn0m4g3
0ab220ebf0 rebuild p0f for alpine 3.13 2021-02-15 12:12:24 +00:00
t3chn0m4g3
2777fc1f41 rebuild medpot for alpine 3.13 2021-02-15 12:09:19 +00:00
t3chn0m4g3
91483a231d rebuild honeysap 2021-02-15 11:46:55 +00:00
t3chn0m4g3
95ea079f4d rebuild heimdall, nginx for php7.4, alpine 3.13 2021-02-15 11:00:00 +00:00
t3chn0m4g3
8112f48270 rebuild elasticpot for alpine 3.13 2021-02-15 10:14:52 +00:00
t3chn0m4g3
898f8be4db rebuild citrixhoneypot for alpine 3.13 2021-02-15 10:05:29 +00:00
t3chn0m4g3
a28ee97f13 rebuild ciscoasa for alpine 3.13 2021-02-15 10:01:03 +00:00
t3chn0m4g3
f2c48d7efc bump cyberchef to latest release 2021-02-12 17:09:44 +00:00
t3chn0m4g3
039f3c115a update adbhoney image 2021-02-12 14:21:31 +00:00
t3chn0m4g3
80d9efa729 bump elk stack images to alpine 3.13 2021-02-12 13:54:42 +00:00
t3chn0m4g3
e5f29f3c90 bump elk stack to 7.11.0 2021-02-12 13:21:35 +00:00
t3chn0m4g3
ee3d667615 bump dionaea to 0.11.0 2021-01-19 10:59:32 +00:00
t3chn0m4g3
d2dc43e1ef Update internet IF retrieval 
To be consistent with @adepasquale PR #746 fatt, glutton and p0f Dockerfiles were updated accordingly.
 2021-01-06 17:05:09 +00:00
Andrea De Pasquale
b3b983afe6 Change method to get default Suricata interface 
On some systems, interface number 2 is not always the correct one.
With AWK we now collect the first active interface having both an
address and a broadcast.
 2021-01-06 11:14:24 +01:00
t3chn0m4g3
e1745bdea1 fix broken sqlite db 2020-12-28 21:49:28 +00:00
t3chn0m4g3
af6ce8854d bump elastic stack to 7.10.1 2020-12-10 15:20:18 +00:00
t3chn0m4g3
6069b214a5 bump ewsposter to 1.12 2020-12-10 11:40:53 +00:00
t3chn0m4g3
f3f9f6ae72 cleanup 2020-12-03 00:01:38 +00:00
t3chn0m4g3
bdf095367d prep for ewsposter 1.11 2020-12-02 23:21:23 +00:00
t3chn0m4g3
8a7e81815e prep for Elastic Stack 7.10.0 2020-12-02 22:36:17 +00:00
Andrea De Pasquale
87a27e4f2b Suricata: use suricata-update for rule management 
As a bonus we can now run "suricata-update" using docker-exec,
triggering both a rule update and a Suricata rule reload.
 2020-11-30 17:56:14 +01:00
Marco Ochse
2ecef8c607
enable MQTT 
as eagle eyed by @adepasquale
 2020-11-27 19:07:12 +01:00
Andrea De Pasquale
73a5847753 Suricata: update suricata.yaml config to 6.0.x 
Merge in the latest updates from suricata-6.0.x while at the same time
keeping the custom T-Pot configuration.

https://github.com/OISF/suricata/blob/suricata-6.0.0/suricata.yaml.in
 2020-11-26 19:16:01 +01:00
Marco Ochse
c976aea73e
Merge pull request #725 from adepasquale/suricata-yaml-5.x 
Suricata: update suricata.yaml config to 5.x
 2020-11-26 16:23:50 +01:00
t3chn0m4g3
4ada38988c bump cowrie to 2.2.0 2020-11-26 08:17:09 +00:00
Andrea De Pasquale
0010f99662 Suricata: disable eve.stats since it's unused 
Prevent the error below by disabling stats globally and in eve-log:

<Error> - [ERRCODE: SC_ERR_STATS_LOG_GENERIC(278)] - eve.stats: stats are disabled globally: set stats.enabled to true.
 2020-11-25 17:07:49 +01:00
Andrea De Pasquale
e2f76c44cb Suricata: update suricata.yaml config to 5.x 
Merge in the latest updates from suricata-5.x while at the same time
keeping the custom T-Pot configuration.

https://github.com/OISF/suricata/blob/master-5.0.x/suricata.yaml.in
 2020-11-25 15:51:41 +01:00
t3chn0m4g3
e26853c7fa bump suricata to 5.0.4 2020-10-28 17:53:23 +00:00
t3chn0m4g3
d64cbe6741 bump ipphoney to latest master 2020-10-28 17:34:28 +00:00
t3chn0m4g3
c3809b5a98 bump heralding to latest master 2020-10-28 17:27:09 +00:00
t3chn0m4g3
a3d40cc57c bump spiderfoot to 3.2.1 2020-10-28 17:08:55 +00:00
t3chn0m4g3
e3fda4d464 bump dionaea to 0.9.2 2020-10-28 16:45:53 +00:00
t3chn0m4g3
4bf245d13b bump conpot to latest master 2020-10-28 13:56:52 +00:00
t3chn0m4g3
92925cecbd bump dicompot to latest master 2020-10-27 21:30:33 +00:00
t3chn0m4g3
f204cdf9b8 bump elk to 7.3 2020-10-27 19:43:32 +00:00
t3chn0m4g3
ff4a394e3b reverting elk to 7.9.1 2020-10-15 12:24:46 +00:00
Marco Ochse
ce7b79b71a
Merge pull request #707 from brianlechthaler/patch-3 
Bump Elastic dependencies to 7.9.2
 2020-10-15 13:37:11 +02:00
t3chn0m4g3
b28cc2edd0 prepare for new ewsposter 2020-10-15 09:14:30 +00:00
Brian Lechthaler
84a741ec64
IMPORTANT: Fix Node Version 
Bump node version to `10.22.1-alpine`

**KIBANA WILL NOT WORK WITHOUT THIS**
 2020-10-07 13:53:21 -07:00
Brian Lechthaler
d351a89096
Bump Kibana version to 7.9.2 2020-10-04 18:05:16 -07:00
Brian Lechthaler
488da48df7
Bump Logstash version to 7.9.2 2020-10-04 18:04:15 -07:00
Brian Lechthaler
85da099cd0
Bump Elasticsearch to 7.9.2 2020-10-04 18:03:00 -07:00
Brian Lechthaler
b1d8e293de
add DockerHub back in cap filter 
see https://github.com/telekom-security/tpotce/pull/691#issuecomment-688648225
 2020-09-08 10:45:58 -07:00
Brian Lechthaler
7fdf9edb60
Update Suricata Capture Filter for New Docker Repo 2020-09-07 19:57:15 -07:00
t3chn0m4g3
0e7abb8d2c restore mibfix for conpot 2020-09-07 15:46:52 +00:00
t3chn0m4g3
1ee9c29805 set new container registry, point installer to branch 2020-09-04 13:29:14 +00:00
t3chn0m4g3
2e5639a50b fix links 2020-09-04 13:01:21 +00:00
listbot
47dca8b835 continue pin / prep images ghcr 2020-09-04 12:37:28 +00:00
listbot
1ac79d6be7 begin prep for move to GitHub Container Registry 
Start pinning Dockerfiles to specific releases / commits
 2020-09-02 15:18:32 +00:00
t3chn0m4g3
54a6a944aa prep for ipphoney 2020-08-25 12:25:59 +00:00
t3chn0m4g3
b86d2c715b prep for ipphoney 2020-08-24 21:36:08 +00:00
t3chn0m4g3
8f06b5b499 start prepping for ipphoney 2020-08-24 15:55:50 +00:00
t3chn0m4g3
6ec5a04802 fix deps issue with conpot 2020-08-24 15:55:10 +00:00
t3chn0m4g3
5080151b7c prep for elk 7.9 2020-08-24 10:35:46 +00:00
t3chn0m4g3
c1f7146800 prep elk stack for 7.9.0 2020-08-20 15:03:16 +00:00
t3chn0m4g3
743616fa09 update conpot to latest working master 2020-08-13 16:30:37 +00:00
t3chn0m4g3
6e18b6f660 bump elasticpot to latest master 2020-08-13 10:37:03 +00:00
t3chn0m4g3
50d67fc286 bump spiderfoot to 3.1 final 
Fix Spiderfoot issue not showing current scan
 2020-08-13 09:06:49 +00:00
t3chn0m4g3
c28642932a bump elk stack to 7.8.1 2020-08-13 08:34:44 +00:00
t3chn0m4g3
8af45c9440 prevent cowrie from unwanted log rotation 2020-07-07 00:00:57 +00:00
t3chn0m4g3
6d29f504df provide fix for #669 2020-07-06 23:30:11 +00:00
t3chn0m4g3
618ee3c6e9 tweaking 
add kibana export / import config function
ewsposter remove transmitting old elasticpot data (need update)
final export of all objects
 2020-06-29 10:45:33 +00:00
t3chn0m4g3
3a418534d8 tweaking 
random reboot times for crontab
remix compose files
some tweaking
 2020-06-28 20:03:14 +00:00
t3chn0m4g3
4e6510b5c7 dicompot tweaking 2020-06-27 00:37:12 +00:00
t3chn0m4g3
16a7cdb975 tweaking 
Update logstash config for new Dicompot fields
Revert Dionaea back to 0.8.0, latest master was unstable
 2020-06-26 23:48:48 +00:00
t3chn0m4g3
0031980416 cleanup and prepare for docker image rebuilds 2020-06-26 14:34:05 +00:00
t3chn0m4g3
6a98496e8c cleanup and prepare for docker image rebuilds 2020-06-25 22:58:23 +00:00
t3chn0m4g3
ec8f5d9b66 cleanup and prepare for docker image rebuilds 2020-06-25 16:14:37 +00:00
t3chn0m4g3
238a08b055 tweaking 
cleanup index-pattern
add dicompot log to logstash
 2020-06-24 13:21:29 +00:00
t3chn0m4g3
99d8cf9b32 fix for query fields 2020-06-24 10:22:09 +00:00
t3chn0m4g3
81c6351cf1 fix for keeping daily index 2020-06-23 21:40:38 +00:00
t3chn0m4g3
65e849cf33 bump elk stack to 7.8 2020-06-21 21:11:21 +00:00
t3chn0m4g3
a396356785 add honeysap logstash config 2020-06-19 22:53:56 +00:00
t3chn0m4g3
a7c653e7fe start integrating honeysap 2020-06-19 11:54:50 +00:00
t3chn0m4g3
697c5cb3f6 begin integration of dicompot 2020-06-18 16:38:43 +00:00
t3chn0m4g3
2882668826 Add a new elasticsearch honeypot 
adjust installer
adjust elasticpot configs to T-Pot's environment
create Dockerfile
adjust logstash config
update Readme
 2020-06-17 18:09:59 +00:00
t3chn0m4g3
27a5db9edf alpine 3.11 needs py3-pip in extra package 2020-06-16 11:28:56 +00:00
t3chn0m4g3
4cc1aa08c2 tweaking 
Bump ELK stack to 7.7.1
Install curator via pip
Some tweaks
 2020-06-08 21:56:16 +00:00
t3chn0m4g3
be918033e0 bump to ELK 7.7.0 2020-05-14 16:27:57 +00:00
t3chn0m4g3
680194adf7 prep for new listbot FQDN 2020-05-12 09:19:09 +00:00
Marco Ochse
be7afd8042
Merge pull request #636 from dtag-dev-sec/master 
merge master to dev
 2020-05-12 10:31:34 +02:00
Marco Ochse
fea6b8a646
correct typo 
fixes #635
 2020-05-11 17:21:22 +02:00
Marco Ochse
cbefe6a074
Update capture-filter.bpf 2020-04-22 17:49:59 +02:00
Marco Ochse
ed73d83317
Update update.sh 2020-04-22 17:48:32 +02:00
Marco Ochse
34bbbf59ac
Update Dockerfile 2020-04-22 17:16:19 +02:00
Marco Ochse
a6c8d3d712
Update Dockerfile 2020-04-22 17:15:44 +02:00
Marco Ochse
1a7b3b3795
Load listbot data from OTC 2020-04-22 16:50:41 +02:00
t3chn0m4g3
73e1842c16 offload listbot from netlify CDN 2020-04-02 13:12:11 +00:00
t3chn0m4g3
2201e072f6 testing honeysap 2020-03-12 16:02:43 +00:00
t3chn0m4g3
fb06c46793 Merge branch 'dev' of https://github.com/dtag-dev-sec/tpotce into dev 2020-03-09 10:44:36 +00:00
t3chn0m4g3
f76d8ab161 update delivery window 2020-03-09 10:43:52 +00:00