telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

tweaking for testing

Browse Source
This commit is contained in:
t3chn0m4g3
2020-03-15 21:10:28 +00:00
parent 5bbebd6fc4
commit 67e70780bf
3 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -1,6 +1,6 @@
![T-Pot](doc/tpotsocial.png) ![T-Pot](doc/tpotsocial.png)
T-Pot 19.03 runs on Debian (Sid), is based heavily on T-Pot 19.03 runs on Debian (Testing), is based heavily on
[docker](https://www.docker.com/), [docker-compose](https://docs.docker.com/compose/) [docker](https://www.docker.com/), [docker-compose](https://docs.docker.com/compose/)
@ -78,8 +78,8 @@ Furthermore we use the following tools
<a name="changelog"></a> <a name="changelog"></a>
# Release Notes # Release Notes
- **Move from Ubuntu 18.04 to Debian (Sid)** - **Move from Ubuntu 18.04 to Debian (Testing)**
- For almost 5 years Ubuntu LTS versions were our distributions of choice. Last year we made a design choice for T-Pot to be closer to a rolling release model and thus allowing us to issue smaller changes and releases in a more timely manner. The distribution of choice is Debian (Sid / unstable) which will provide us with the latest advancements in a Debian based distribution. - For almost 5 years Ubuntu LTS versions were our distributions of choice. Last year we made a design choice for T-Pot to be closer to a rolling release model and thus allowing us to issue smaller changes and releases in a more timely manner. The distribution of choice is Debian (Testing) which will provide us with the latest advancements in a Debian based distribution.
- **Include HoneyPy honeypot** - **Include HoneyPy honeypot**
- *HoneyPy* is now included in the NEXTGEN installation type - *HoneyPy* is now included in the NEXTGEN installation type
- **Include Suricata 4.1.3** - **Include Suricata 4.1.3**
@ -119,7 +119,7 @@ Furthermore we use the following tools
- **Fix #332** - **Fix #332**
- If T-Pot, opposed to the requirements, does not have full internet access netselect-apt fails to determine the fastest mirror as it needs ICMP and UDP outgoing. Should netselect-apt fail the default mirrors will be used. - If T-Pot, opposed to the requirements, does not have full internet access netselect-apt fails to determine the fastest mirror as it needs ICMP and UDP outgoing. Should netselect-apt fail the default mirrors will be used.
- **Improve install speed with apt-fast** - **Improve install speed with apt-fast**
- Migrating from a stable base install to Debian (Sid) requires downloading lots of packages. Depending on your geo location the download speed was already improved by introducing netselect-apt to determine the fastest mirror. With apt-fast the downloads will be even faster by downloading packages not only in parallel but also with multiple connections per package. - Migrating from a stable base install to Debian (Testing) requires downloading lots of packages. Depending on your geo location the download speed was already improved by introducing netselect-apt to determine the fastest mirror. With apt-fast the downloads will be even faster by downloading packages not only in parallel but also with multiple connections per package.
- **HPFEEDS Opt-In commandline option** - **HPFEEDS Opt-In commandline option**
- Pass a hpfeeds config file as a commandline argument - Pass a hpfeeds config file as a commandline argument
- hpfeeds config is saved in `/data/ews/conf/hpfeeds.cfg` - hpfeeds config is saved in `/data/ews/conf/hpfeeds.cfg`
@ -133,7 +133,7 @@ Furthermore we use the following tools
<a name="concept"></a> <a name="concept"></a>
# Technical Concept # Technical Concept
T-Pot is based on the network installer Debian (Stretch). During installation the whole system will be updated to Debian (Sid). T-Pot is based on the network installer Debian (Stretch). During installation the whole system will be updated to Debian (Testing).
The honeypot daemons as well as other support components being used have been containerized using [docker](http://docker.io). The honeypot daemons as well as other support components being used have been containerized using [docker](http://docker.io).
This allows us to run multiple honeypot daemons on the same network interface while maintaining a small footprint and constrain each honeypot within its own environment. This allows us to run multiple honeypot daemons on the same network interface while maintaining a small footprint and constrain each honeypot within its own environment.
@ -302,7 +302,7 @@ In some cases it is necessary to install Debian 9.7 (Stretch) on your own:
- Within your company you have to setup special policies, software etc. - Within your company you have to setup special policies, software etc.
- You just like to stay on top of things. - You just like to stay on top of things.
The T-Pot Universal Installer will upgrade the system to Debian (Sid) and install all required T-Pot dependencies. The T-Pot Universal Installer will upgrade the system to Debian (Testing) and install all required T-Pot dependencies.
Just follow these steps: Just follow these steps:
@ -396,7 +396,7 @@ For the ones of you who want to live on the bleeding edge of T-Pot development w
The Update script will: The Update script will:
- **mercilessly** overwrite local changes to be in sync with the T-Pot master branch - **mercilessly** overwrite local changes to be in sync with the T-Pot master branch
- upgrade the system to the packages available in Debian (Sid) - upgrade the system to the packages available in Debian (Testing)
- update all resources to be in-sync with the T-Pot master branch - update all resources to be in-sync with the T-Pot master branch
- ensure all T-Pot relevant system files will be patched / copied into the original T-Pot state - ensure all T-Pot relevant system files will be patched / copied into the original T-Pot state
- restore your custom ews.cfg and HPFEED settings from `/data/ews/conf` - restore your custom ews.cfg and HPFEED settings from `/data/ews/conf`

10
iso/installer/install.sh
View File

@ -16,15 +16,15 @@ myREMOTESITES="https://hub.docker.com https://github.com https://pypi.python.org
myPREINSTALLPACKAGES="aria2 apache2-utils cracklib-runtime curl dialog figlet fuse grc libcrack2 libpq-dev lsb-release netselect-apt net-tools software-properties-common toilet" myPREINSTALLPACKAGES="aria2 apache2-utils cracklib-runtime curl dialog figlet fuse grc libcrack2 libpq-dev lsb-release netselect-apt net-tools software-properties-common toilet"
myINSTALLPACKAGES="aria2 apache2-utils apparmor apt-transport-https aufs-tools bash-completion build-essential ca-certificates cgroupfs-mount cockpit console-setup console-setup-linux cracklib-runtime curl debconf-utils dialog dnsutils docker.io docker-compose elasticsearch-curator ethtool fail2ban figlet genisoimage git glances grc haveged html2text htop iptables iw jq kbd libcrack2 libltdl7 libpam-google-authenticator man mosh multitail netselect-apt net-tools npm ntp openssh-server openssl pass pigz prips software-properties-common syslinux psmisc pv python3-pip toilet unattended-upgrades unzip vim wget wireless-tools wpasupplicant" myINSTALLPACKAGES="aria2 apache2-utils apparmor apt-transport-https aufs-tools bash-completion build-essential ca-certificates cgroupfs-mount cockpit console-setup console-setup-linux cracklib-runtime curl debconf-utils dialog dnsutils docker.io docker-compose elasticsearch-curator ethtool fail2ban figlet genisoimage git glances grc haveged html2text htop iptables iw jq kbd libcrack2 libltdl7 libpam-google-authenticator man mosh multitail netselect-apt net-tools npm ntp openssh-server openssl pass pigz prips software-properties-common syslinux psmisc pv python3-pip toilet unattended-upgrades unzip vim wget wireless-tools wpasupplicant"
myINFO="\ myINFO="\
######################################## ############################################
### T-Pot Installer for Debian (testing) ### ### T-Pot Installer for Debian (Testing) ###
######################################## ############################################
Disclaimer: Disclaimer:
This script will install T-Pot on this system. This script will install T-Pot on this system.
By running the script you know what you are doing: By running the script you know what you are doing:
1. SSH will be reconfigured to tcp/64295. 1. SSH will be reconfigured to tcp/64295.
2. Your Debian installation will be upgraded to testing. 2. Your Debian installation will be upgraded to Testing.
3. Please ensure other means of access to this system in case something goes wrong. 3. Please ensure other means of access to this system in case something goes wrong.
4. At best this script will be executed on the console instead through a SSH session. 4. At best this script will be executed on the console instead through a SSH session.
@ -403,7 +403,7 @@ for i in "$@"
echo " A configuration example is available in \"tpotce/iso/installer/tpot.conf.dist\"." echo " A configuration example is available in \"tpotce/iso/installer/tpot.conf.dist\"."
echo echo
echo "--type=<[user, auto, iso]>" echo "--type=<[user, auto, iso]>"
echo " user, use this if you want to manually install a T-Pot on a Debian (testing) machine." echo " user, use this if you want to manually install a T-Pot on a Debian (Testing) machine."
echo " auto, implied if a configuration file is passed as an argument for automatic deployment." echo " auto, implied if a configuration file is passed as an argument for automatic deployment."
echo " iso, use this if you are a T-Pot developer and want to install a T-Pot from a pre-compiled iso." echo " iso, use this if you are a T-Pot developer and want to install a T-Pot from a pre-compiled iso."
echo echo

2
iso/isolinux/txt.cfg
View File

@ -1,6 +1,6 @@
default install default install
label install label install
menu label ^T-Pot 19.03.1 (based on Debian Sid) menu label ^T-Pot 19.03.3 (based on Debian Testing)
menu default menu default
kernel linux kernel linux
append vga=788 initrd=initrd.gz console-setup/ask_detect=true -- append vga=788 initrd=initrd.gz console-setup/ask_detect=true --