mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-05-05 14:48:53 +00:00
69 lines
2.2 KiB
Bash
Executable file
69 lines
2.2 KiB
Bash
Executable file
#!/bin/bash
|
||
# Let's add the first local ip to the /tmp/etc/issue and external ip to ews.ip file
|
||
# If the external IP cannot be detected, the internal IP will be inherited.
|
||
#myCHECKIFSENSOR=$(head -n 1 /opt/tpot/etc/tpot.yml | grep "Sensor" | wc -l)
|
||
myUUID=$(cat /data/uuid)
|
||
myLOCALIP=$(ip address show | awk '/inet .*brd/{split($2,a,"/"); print a[1]; exit}')
|
||
myEXTIP=$(/opt/tpot/bin/myip.sh)
|
||
if [ "$myEXTIP" = "" ];
|
||
then
|
||
myEXTIP=$myLOCALIP
|
||
fi
|
||
|
||
# Load Blackhole routes if enabled
|
||
#myBLACKHOLE_FILE1="/etc/blackhole/mass_scanner.txt"
|
||
#myBLACKHOLE_FILE2="/etc/blackhole/mass_scanner_cidr.txt"
|
||
#if [ -f "$myBLACKHOLE_FILE1" ] || [ -f "$myBLACKHOLE_FILE2" ];
|
||
# then
|
||
# /opt/tpot/bin/blackhole.sh add
|
||
#fi
|
||
|
||
myBLACKHOLE_STATUS=$(ip r | grep "blackhole" -c)
|
||
if [ "$myBLACKHOLE_STATUS" -gt "500" ];
|
||
then
|
||
myBLACKHOLE_STATUS="| [1;34mBLACKHOLE: [ [0;37mENABLED[1;34m ][0m"
|
||
else
|
||
myBLACKHOLE_STATUS="| [1;34mBLACKHOLE: [ [1;30mDISABLED[1;34m ][0m"
|
||
fi
|
||
|
||
# Build issue
|
||
echo "[H[2J" > /tmp/etc/issue
|
||
echo "T-Pot 23.12" >> /tmp/etc/issue
|
||
echo >> /tmp/etc/issue
|
||
echo ",---- [ [1;34m\n[0m ] [ [0;34m\d[0m ] [ [1;30m\t[0m ]" >> /tmp/etc/issue
|
||
echo "|" >> /tmp/etc/issue
|
||
echo "| [1;34mIP: $myLOCALIP ($myEXTIP)[0m" >> /tmp/etc/issue
|
||
echo "| [0;34mSSH: ssh -l tsec -p 64295 $myLOCALIP[0m" >> /tmp/etc/issue
|
||
#if [ "$myCHECKIFSENSOR" == "0" ];
|
||
# then
|
||
echo "| [1;30mWEB: https://$myLOCALIP:64297[0m" >> /tmp/etc/issue
|
||
#fi
|
||
echo "| [0;37mADMIN: https://$myLOCALIP:64294[0m" >> /tmp/etc/issue
|
||
echo "$myBLACKHOLE_STATUS" >> /tmp/etc/issue
|
||
echo "|" >> /tmp/etc/issue
|
||
echo "\`----" >> /tmp/etc/issue
|
||
echo >> /tmp/etc/issue
|
||
tee /data/ews/conf/ews.ip << EOF
|
||
[MAIN]
|
||
ip = $myEXTIP
|
||
EOF
|
||
tee /data/tpot/etc/compose/elk_environment << EOF
|
||
HONEY_UUID=$myUUID
|
||
MY_EXTIP=$myEXTIP
|
||
MY_INTIP=$myLOCALIP
|
||
MY_HOSTNAME=$HOSTNAME
|
||
EOF
|
||
|
||
#if [ -s "/data/elk/logstash/ls_environment" ];
|
||
# then
|
||
# source /data/elk/logstash/ls_environment
|
||
# tee -a /data/tpot/etc/compose/elk_environment << EOF
|
||
#MY_TPOT_TYPE=$MY_TPOT_TYPE
|
||
#MY_SENSOR_PRIVATEKEYFILE=$MY_SENSOR_PRIVATEKEYFILE
|
||
#MY_HIVE_USERNAME=$MY_HIVE_USERNAME
|
||
#MY_HIVE_IP=$MY_HIVE_IP
|
||
#EOF
|
||
#fi
|
||
|
||
chown tpot:tpot /data/ews/conf/ews.ip
|
||
chmod 770 /data/ews/conf/ews.ip
|