[webserver] host = 0.0.0.0 port = 80 uid = glastopf gid = glastopf proxy_enabled = False [ssl] enabled = False certfile = keyfile = #Generic logging for general monitoring [logging] consolelog_enabled = True filelog_enabled = True logfile = log/glastopf.log [dork-db] enabled = True pattern = rfi # Extracts dorks from a online dorks service operated by The Honeynet Project # This service is down until further notice! mnem_service = False [hpfeed] enabled = False host = hpfriends.honeycloud.net port = 20000 secret = 3wis3l2u5l7r3cew # channels comma separated chan_events = glastopf.events chan_files = glastopf.files ident = x8yer@hp1 [main-database] #If disabled a sqlite database will be created (db/glastopf.db) #to be used as dork storage. enabled = True #mongodb or sqlalchemy connection string, ex: #mongodb://localhost:27017/glastopf #mongodb://james:bond@localhost:27017/glastopf #mysql://james:bond@somehost.com/glastopf connection_string = sqlite:///db/glastopf.db [surfcertids] enabled = False host = localhost port = 5432 user = password = database = idsserver [syslog] enabled = False socket = /dev/log [mail] enabled = False # an email notification will be sent only if a specified matched pattern is identified. # Use the wildcard char *, to be notified every time patterns = rfi,lfi user = pwd = mail_from = mail_to = smtp_host = smtp.gmail.com smtp_port = 587 [taxii] enabled = False host = taxiitest.mitre.org port = 80 inbox_path = /services/inbox/default/ use_https = False use_auth_basic = False auth_basic_username = your_username auth_basic_password = your_password use_auth_certificate = False auth_certificate_keyfile = full_path_to_keyfile auth_certificate_certfile = full_path_to_certfile include_contact_info = False contact_name = ... contact_email = ... [logstash] enabled = False host = localhost port = 5659 handler = AMQP/TCP/UDP [misc] # set webserver banner banner = Apache/2.0.48 [surface] #https://www.google.com/webmasters/ google_meta = #http://www.bing.com/toolbox/webmaster bing_meta = [sensor] sensorid = None [profiler] enabled = False [s3storage] enabled = False endpoint = http://localhost:8080/ aws_access_key_id = YOUR_aws_access_key_id aws_secret_access_key = YOUR_aws_access_key_id bucket = glastopf region = eu-west-1 signature_version = s3