mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
replace es-head with elasticvue, tweaking
es-head does not support building with ARM64 and had to be replaced with the even better elasticvue elasticvue will now run within the nginx container, freeing some RAM :) on the way
This commit is contained in:
t3chn0m4g3
@ -179,11 +179,6 @@ services:
|
||||
build: elk/logstash/.
|
||||
image: "dtagdevsec/logstash:2203"
|
||||
|
||||
## Elasticsearch-head service
|
||||
head:
|
||||
build: elk/head/.
|
||||
image: "dtagdevsec/head:2203"
|
||||
|
||||
# Ewsposter service
|
||||
ewsposter:
|
||||
build: ews/.
|
||||
|
||||
@ -57,16 +57,3 @@ services:
|
||||
volumes:
|
||||
- /data:/data
|
||||
# - /root/tpotce/docker/elk/logstash/dist/logstash.conf:/etc/logstash/conf.d/logstash.conf
|
||||
|
||||
## Elasticsearch-head service
|
||||
head:
|
||||
build: head/.
|
||||
container_name: head
|
||||
restart: always
|
||||
depends_on:
|
||||
elasticsearch:
|
||||
condition: service_healthy
|
||||
ports:
|
||||
- "127.0.0.1:64302:9100"
|
||||
image: "dtagdevsec/head:2203"
|
||||
read_only: true
|
||||
|
||||
@ -39,12 +39,14 @@ RUN apk -U --no-cache add \
|
||||
php7 artisan key:generate && \
|
||||
#
|
||||
## Add previously configured content
|
||||
mkdir -p /var/lib/nginx/html/storage/app/public/backgrounds/ && \
|
||||
mkdir -p /var/lib/nginx/html/storage/app/public/backgrounds/ \
|
||||
/var/lib/nginx/html/esvue && \
|
||||
tar xvfz /root/dist/esvue.tgz -C /var/lib/nginx/html/esvue && \
|
||||
cp /root/dist/app/bg1.jpg /var/lib/nginx/html/public/img/bg1.jpg && \
|
||||
cp /root/dist/app/t-pot.png /var/lib/nginx/html/public/img/heimdall-icon-small.png && \
|
||||
cp /root/dist/app/app.sqlite /var/lib/nginx/html/database/app.sqlite && \
|
||||
cp /root/dist/app/cyberchef.png /var/lib/nginx/html/storage/app/public/icons/ZotKKZA2QKplZhdoF3WLx4UdKKhLFamf3lSMcLkr.png && \
|
||||
cp /root/dist/app/eshead.png /var/lib/nginx/html/storage/app/public/icons/77KqFv4YIshXUDLDoOvZ1NUbsKDtsMAjJvg4sYqN.png && \
|
||||
cp /root/dist/app/esvue.png /var/lib/nginx/html/storage/app/public/icons/3aLDl0Kq42sTHSpIrJtmrOTThpvHoL0Zk2Ay13YT.png && \
|
||||
cp /root/dist/app/tsec.png /var/lib/nginx/html/storage/app/public/icons/RHwXCfCeGNDdhYgzlShL9o4NBFL2LHZWajgyeL0a.png && \
|
||||
cp /root/dist/app/spiderfoot.png /var/lib/nginx/html/storage/app/public/icons/s7uPe1frJqjv76oI6SNqNbWUsgU1GHYqRALMlwYb.png && \
|
||||
cp /root/dist/html/*.html /var/lib/nginx/html/public/ && \
|
||||
|
||||
BIN
docker/heimdall/dist/app/app.sqlite
vendored
BIN
docker/heimdall/dist/app/app.sqlite
vendored
Binary file not shown.
BIN
docker/heimdall/dist/app/eshead.png
vendored
BIN
docker/heimdall/dist/app/eshead.png
vendored
Binary file not shown.
|
Before Width: | Height: | Size: 13 KiB |
BIN
docker/heimdall/dist/app/esvue.png
vendored
Normal file
BIN
docker/heimdall/dist/app/esvue.png
vendored
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 2.8 KiB |
12
docker/heimdall/dist/conf/tpotweb.conf
vendored
12
docker/heimdall/dist/conf/tpotweb.conf
vendored
@ -96,6 +96,12 @@ server {
|
||||
try_files $uri $uri/ /index.php?$query_string;
|
||||
}
|
||||
|
||||
location ^~ /elasticvue {
|
||||
index index.html;
|
||||
alias /var/lib/nginx/html/esvue;
|
||||
try_files $uri $uri/ /index.html?$args;
|
||||
}
|
||||
|
||||
location ~ \.php$ {
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
fastcgi_pass 127.0.0.1:64304;
|
||||
@ -120,12 +126,6 @@ server {
|
||||
rewrite /es/(.*)$ /$1 break;
|
||||
}
|
||||
|
||||
### head standalone
|
||||
location /myhead/ {
|
||||
proxy_pass http://127.0.0.1:64302/;
|
||||
rewrite /myhead/(.*)$ /$1 break;
|
||||
}
|
||||
|
||||
### CyberChef
|
||||
location /cyberchef {
|
||||
proxy_pass http://127.0.0.1:64299;
|
||||
|
||||
BIN
docker/heimdall/dist/esvue.tgz
vendored
Normal file
BIN
docker/heimdall/dist/esvue.tgz
vendored
Normal file
Binary file not shown.
@ -27,7 +27,7 @@ services:
|
||||
- "64297:64297"
|
||||
- "127.0.0.1:64304:64304"
|
||||
image: "dtagdevsec/nginx:2203"
|
||||
read_only: true
|
||||
# read_only: true
|
||||
volumes:
|
||||
- /data/nginx/cert/:/etc/nginx/cert/:ro
|
||||
- /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro
|
||||
|
||||
@ -28,8 +28,8 @@ RUN apk -U add \
|
||||
mkdir -p /opt \
|
||||
/var/log/honeypots && \
|
||||
cd /opt/ && \
|
||||
#git clone https://github.com/qeeqbox/honeypots && \
|
||||
git clone https://github.com/t3chn0m4g3/honeypots && \
|
||||
git clone https://github.com/qeeqbox/honeypots && \
|
||||
#git clone https://github.com/t3chn0m4g3/honeypots && \
|
||||
cd honeypots && \
|
||||
#git checkout 7c654a3ef2c564ae6f1247bf302d652037080163 && \
|
||||
pip3 install --upgrade pip && \
|
||||
@ -61,4 +61,4 @@ RUN apk -U add \
|
||||
STOPSIGNAL SIGINT
|
||||
USER honeypots:honeypots
|
||||
WORKDIR /opt/honeypots/
|
||||
CMD python3 -m honeypots --setup all --config config.json
|
||||
CMD python3 -E -m honeypots --setup all --config config.json
|
||||
|
||||
359
docker/honeypots/dist/config.json
vendored
359
docker/honeypots/dist/config.json
vendored
@ -1,144 +1,219 @@
|
||||
{
|
||||
"logs":"file,terminal",
|
||||
"logs_location":"/var/log/honeypots/",
|
||||
"honeypots": {
|
||||
"dns": {
|
||||
"port": 53,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456"
|
||||
},
|
||||
"ftp": {
|
||||
"port": 21,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "ftp",
|
||||
"password": "anonymous"
|
||||
},
|
||||
"httpproxy": {
|
||||
"port": 8080,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin"
|
||||
},
|
||||
"http": {
|
||||
"port": 80,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin"
|
||||
},
|
||||
"https": {
|
||||
"port": 443,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin"
|
||||
},
|
||||
"imap": {
|
||||
"port": 143,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456"
|
||||
},
|
||||
"mysql": {
|
||||
"port": 3306,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456"
|
||||
},
|
||||
"pop3": {
|
||||
"port": 110,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456"
|
||||
},
|
||||
"postgres": {
|
||||
"port": 5432,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "postgres",
|
||||
"password": "123456"
|
||||
},
|
||||
"redis": {
|
||||
"port": 6379,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": ""
|
||||
},
|
||||
"smb": {
|
||||
"port": 445,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456"
|
||||
},
|
||||
"smtp": {
|
||||
"port": 25,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456"
|
||||
},
|
||||
"socks5": {
|
||||
"port": 1080,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin"
|
||||
},
|
||||
"ssh": {
|
||||
"port": 22,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456"
|
||||
},
|
||||
"telnet": {
|
||||
"port": 23,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456"
|
||||
},
|
||||
"vnc": {
|
||||
"port": 5900,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456"
|
||||
},
|
||||
"elastic": {
|
||||
"port": 9200,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "elastic",
|
||||
"password": "123456"
|
||||
},
|
||||
"mssql": {
|
||||
"port": 1433,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "sa",
|
||||
"password": ""
|
||||
},
|
||||
"ldap": {
|
||||
"port": 389,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456"
|
||||
},
|
||||
"ntp": {
|
||||
"port": 123,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456"
|
||||
},
|
||||
"memcache": {
|
||||
"port": 11211,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "123456"
|
||||
},
|
||||
"oracle": {
|
||||
"port": 1521,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "bi",
|
||||
"password": "123456"
|
||||
},
|
||||
"snmp": {
|
||||
"port": 161,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "privUser",
|
||||
"password": "123456"
|
||||
}
|
||||
}
|
||||
"logs": "file,terminal,json,tpot",
|
||||
"logs_location":"/var/log/honeypots/",
|
||||
"syslog_address": "",
|
||||
"syslog_facility": 0,
|
||||
"postgres": "",
|
||||
"db_options": [],
|
||||
"filter": "",
|
||||
"interface": "",
|
||||
"honeypots": {
|
||||
"dns": {
|
||||
"port": 53,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456",
|
||||
"log_file_name": "dns.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"ftp": {
|
||||
"port": 21,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "ftp",
|
||||
"password": "anonymous",
|
||||
"log_file_name": "ftp.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"httpproxy": {
|
||||
"port": 8080,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin",
|
||||
"log_file_name": "httpproxy.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"http": {
|
||||
"port": 80,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin",
|
||||
"log_file_name": "http.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"https": {
|
||||
"port": 443,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin",
|
||||
"log_file_name": "https.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"imap": {
|
||||
"port": 143,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456",
|
||||
"log_file_name": "imap.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"mysql": {
|
||||
"port": 3306,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456",
|
||||
"log_file_name": "mysql.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"pop3": {
|
||||
"port": 110,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456",
|
||||
"log_file_name": "pop3.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"postgres": {
|
||||
"port": 5432,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "postgres",
|
||||
"password": "123456",
|
||||
"log_file_name": "postgres.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"redis": {
|
||||
"port": 6379,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "",
|
||||
"log_file_name": "redis.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"smb": {
|
||||
"port": 445,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456",
|
||||
"log_file_name": "smb.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"smtp": {
|
||||
"port": 25,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456",
|
||||
"log_file_name": "smtp.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"socks5": {
|
||||
"port": 1080,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "admin",
|
||||
"log_file_name": "socks5.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"ssh": {
|
||||
"port": 22,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456",
|
||||
"log_file_name": "ssh.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"telnet": {
|
||||
"port": 23,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "root",
|
||||
"password": "123456",
|
||||
"log_file_name": "telnet.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"vnc": {
|
||||
"port": 5900,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456",
|
||||
"log_file_name": "vnc.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"elastic": {
|
||||
"port": 9200,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "elastic",
|
||||
"password": "123456",
|
||||
"log_file_name": "elastic.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"mssql": {
|
||||
"port": 1433,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "sa",
|
||||
"password": "",
|
||||
"log_file_name": "mssql.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"ldap": {
|
||||
"port": 389,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456",
|
||||
"log_file_name": "ldap.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"ntp": {
|
||||
"port": 123,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "administrator",
|
||||
"password": "123456",
|
||||
"log_file_name": "ntp.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"memcache": {
|
||||
"port": 11211,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "admin",
|
||||
"password": "123456",
|
||||
"log_file_name": "memcache.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"oracle": {
|
||||
"port": 1521,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "bi",
|
||||
"password": "123456",
|
||||
"log_file_name": "oracle.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
},
|
||||
"snmp": {
|
||||
"port": 161,
|
||||
"ip": "0.0.0.0",
|
||||
"username": "privUser",
|
||||
"password": "123456",
|
||||
"log_file_name": "snmp.log",
|
||||
"max_bytes": 10000,
|
||||
"backup_count": 10
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user