t3chn0m4g3
e1d6d376dc
Enhance Cowrie persona support by adding package manager handling and skip command filtering in protocol.py
2026-05-28 14:49:17 +02:00
t3chn0m4g3
aefe3c7dac
Add support for Cowrie personas with patching and startup scripts
...
- Introduced `patch_cowrie_persona_support.py` to modify Cowrie's source files for persona support, including updates to protocol handling, SSH command responses, netstat output, and service status.
- Created `start-cowrie-persona.py` to manage persona activation, including loading persona configurations, selecting a persona based on environment variables, and starting Cowrie with the selected persona.
- Ensured proper error handling and validation for persona files and configurations.
2026-05-28 14:01:11 +02:00
t3chn0m4g3
05e3148cf4
bump cowrie to latest release v3.0.0 and alpine image, adjust config and add tests
2026-05-28 12:16:31 +02:00
t3chn0m4g3
c07121b930
pin conpot to latest master
2026-05-28 08:56:17 +02:00
t3chn0m4g3
a936653cfa
bump conpot to latest master with py 3.12 support, update tags
2026-05-27 19:54:18 +02:00
t3chn0m4g3
a945f865f1
add test for conpot, fix ipmi issue on pinned version
2026-05-27 16:14:46 +02:00
t3chn0m4g3
d830a6f3cc
add citrixhoneypot test and update to latest alpine base image
2026-05-27 13:13:21 +02:00
t3chn0m4g3
7c3680db1f
update ciscoasa to latest alpine base image
2026-05-27 13:10:09 +02:00
t3chn0m4g3
83a42274ac
add tests for adbhoney, ciscoasa
2026-05-27 12:21:29 +02:00
t3chn0m4g3
d709cfd1fd
update adbhoney to latest alpine base image
2026-05-27 12:20:31 +02:00
t3chn0m4g3
98e9d6bde8
Prep update for Nginx Image:
...
- Bump Nginx to latest version
- Bump Cyberchef to 11.0
- Bump Elasticvue to 1.15.0
2026-05-20 17:10:57 +02:00
t3chn0m4g3
13bf21bb82
Fixes #1866 , thank you @regulartim for reporting
2026-01-29 14:05:00 +01:00
t3chn0m4g3
04e44dfd43
Cleaning up
2026-01-16 19:52:12 +01:00
t3chn0m4g3
4128490151
Avoid exposing ENVs - Thanks @ Kevin Setz
2026-01-16 19:13:23 +01:00
t3chn0m4g3
39193ecd98
Refresh nginx container (i.e. esvue) for ELK 9.2.3 support
2026-01-06 13:41:54 +01:00
t3chn0m4g3
fdf9be3e6f
Prepare for Elastic Stack 9.2.3
2026-01-05 20:14:57 +01:00
t3chn0m4g3
7a4c4bc997
prepare for t-pot-attack-map 3.0.0
2025-12-18 12:26:38 +01:00
t3chn0m4g3
1a266c4712
bump ewsposter to latest master
2025-08-28 11:52:33 +02:00
t3chn0m4g3
6fca3cb375
Bump Elastic Stack to 8.19.2
2025-08-27 16:51:58 +02:00
t3chn0m4g3
eefbf7ddcf
bump h0neytr4p to v0.35
2025-08-15 17:07:33 +02:00
t3chn0m4g3
1b528ea9f9
Bump h0neytr4p to v0.34
2025-08-15 14:56:36 +02:00
t3chn0m4g3
0be973b4eb
Bump Elastic Stack to 8.18.4
2025-08-07 10:43:18 +02:00
t3chn0m4g3
443a9d19fc
Update and pin Glutton to latest master
2025-08-06 15:46:00 +02:00
t3chn0m4g3
6faf600d40
Fix logstash logging issue, introduced with Sentrypeer 4.0.4
...
Similar to #1807
2025-07-03 10:48:18 +02:00
t3chn0m4g3
2f0a9f7f49
fixes #1807 via 93048e724a
...
thanks to @trixam 🚀 ❤️
2025-07-02 15:04:37 +02:00
t3chn0m4g3
175e1944c2
Bump Elastic Stack to 8.18.3
...
- Logstash: include syslog output plugin and config example
2025-06-30 16:06:45 +02:00
t3chn0m4g3
6933ee0065
bump elastic stack to 8.18.2
2025-06-14 13:03:27 +02:00
t3chn0m4g3
8fd23d7796
setup multiarch builder
2025-06-14 12:22:04 +02:00
t3chn0m4g3
8a59696a5c
prep sentrypeer for v4.0.4
2025-06-13 20:28:27 +02:00
t3chn0m4g3
1d2592bb30
prep for rebuild, bump map to 2.2.7
2025-06-13 19:46:29 +02:00
t3chn0m4g3
9455877fa3
add TPOT_PERSISTENCE_CYCLES setting
...
- makes logrotate cycles configurable, instead of static 30 days
- adjust .env / env.example for setting cycles
- adjust tpotinit dockerfile to include envsubst
- add logrotate.template
- add checks / validations
2025-05-13 15:32:00 +02:00
t3chn0m4g3
3372a23eb2
Bump Elasticvue to v1.7.0
...
- adding support for latest Elastic Stack
2025-05-12 12:34:07 +02:00
t3chn0m4g3
7eb271c6ac
Bump Elastic Stack to 8.18.1
...
- Continue prep to 9.x as discussed in #1788
2025-05-12 12:07:56 +02:00
t3chn0m4g3
c180732af3
Adjust genuser.sh
...
- add more logging
- retrieve docker repo and version tag from .env
- only use specified repo / version for download image
- allow for user interrupt
2025-05-12 11:48:47 +02:00
t3chn0m4g3
e9d80607c3
Bump Elastic Stack to 8.17.5
2025-05-07 12:56:15 +02:00
t3chn0m4g3
e46942674b
bump ewsposter to latest master
2025-05-06 19:36:02 +02:00
t3chn0m4g3
8dafef2857
bump ewsposter to v1.31
2025-05-05 16:39:25 +02:00
t3chn0m4g3
84447e686d
tweaking
2025-03-14 12:35:30 +01:00
Marco Ochse
9d17d7b505
Merge pull request #1761 from rsatrio/master
...
fix: modify script to accomodate ip address show without brd
2025-03-14 11:21:48 +01:00
rsatrio
d3d26eac05
refactor: change command to get active network interface
2025-03-14 06:31:32 +07:00
t3chn0m4g3
988b7a8651
Bump Elastic Stack to 8.17.3
...
https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441
2025-03-06 11:32:51 +01:00
t3chn0m4g3
b659d5a036
prepare for new ewsposter release
2025-03-03 17:34:29 +01:00
rsatrio
873f515727
fix: modify script to accomodate ip address show without brd
2025-02-25 18:39:22 +07:00
t3chn0m4g3
bdea4e2932
pin tpotinit to alpine 3.20
2025-02-20 17:29:16 +01:00
t3chn0m4g3
26a25719ff
bump elastic stack to 8.17.2
2025-02-20 17:09:09 +01:00
t3chn0m4g3
98c90be47c
bump honeypots to latest master
2025-02-13 14:03:24 +01:00
t3chn0m4g3
95626fb2cc
Disable DNS UDP Logging in Suricata, tweaking
2025-02-12 15:21:49 +01:00
Marco Ochse
bd055f0037
Update Cowrie to latest master, fix typo
2025-01-21 12:25:21 +01:00
Marco Ochse
8162ce2571
Pin poetry==1.8.3
...
Multi-arch builds for log4pot are currently only working when pinning `poetry==1.8.3`.
As reported pipeline did not push images to registries (#1736 )
2025-01-15 16:23:06 +01:00
t3chn0m4g3
e53c864138
install log4pot w/o dev group
2025-01-14 18:17:02 +01:00