mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
tweaking honeysap, rdpy, editions, installer
move honeysap, rdpy to deprecated as currently no Py3 version available remove honeysap, rdpy from editions adjust installer for running on ARM64 (post-install)
This commit is contained in:
44
docker/deprecated/honeysap/Dockerfile
Normal file
44
docker/deprecated/honeysap/Dockerfile
Normal file
@ -0,0 +1,44 @@
|
||||
FROM alpine:3.11
|
||||
#
|
||||
# Include dist
|
||||
ADD dist/ /root/dist/
|
||||
#
|
||||
# Install packages
|
||||
RUN apk -U --no-cache add \
|
||||
build-base \
|
||||
git \
|
||||
libstdc++ \
|
||||
python2 \
|
||||
python2-dev \
|
||||
py2-pip \
|
||||
tcpdump && \
|
||||
#
|
||||
# Clone honeysap from git
|
||||
# git clone --depth=1 https://github.com/SecureAuthCorp/HoneySAP /opt/honeysap && \
|
||||
git clone --depth=1 https://github.com/t3chn0m4g3/HoneySAP /opt/honeysap && \
|
||||
cd /opt/honeysap && \
|
||||
git checkout a3c355a710d399de9d543659a685effaa70e683d && \
|
||||
mkdir conf && \
|
||||
cp /root/dist/* conf/ && \
|
||||
python setup.py install && \
|
||||
pip install markupsafe && \
|
||||
pip install -r requirements-optional.txt && \
|
||||
#
|
||||
# Setup user, groups and configs
|
||||
addgroup -g 2000 honeysap && \
|
||||
adduser -S -s /bin/ash -u 2000 -D -g 2000 honeysap && \
|
||||
chown -R honeysap:honeysap /opt/honeysap && \
|
||||
#
|
||||
# Clean up
|
||||
apk del --purge \
|
||||
build-base \
|
||||
git \
|
||||
python2-dev && \
|
||||
rm -rf /root/* \
|
||||
/var/cache/apk/*
|
||||
#
|
||||
# Set workdir and start honeysap
|
||||
STOPSIGNAL SIGKILL
|
||||
USER honeysap:honeysap
|
||||
WORKDIR /opt/honeysap
|
||||
CMD ["/opt/honeysap/bin/honeysap", "--config-file", "/opt/honeysap/conf/honeysap.yml"]
|
6
docker/deprecated/honeysap/dist/external_route_table.yml
vendored
Normal file
6
docker/deprecated/honeysap/dist/external_route_table.yml
vendored
Normal file
@ -0,0 +1,6 @@
|
||||
# HoneSAP default external profile route table
|
||||
# ============================================
|
||||
#
|
||||
|
||||
# Allow any protocols to 10.0.0.100 port 3200
|
||||
- allow,any,10.0.0.100,3200,
|
103
docker/deprecated/honeysap/dist/honeysap.yml
vendored
Normal file
103
docker/deprecated/honeysap/dist/honeysap.yml
vendored
Normal file
@ -0,0 +1,103 @@
|
||||
# HoneSAP default external profile configuration
|
||||
# ==============================================
|
||||
|
||||
# Console logging configuration
|
||||
# -----------------------------
|
||||
|
||||
# Level of console logging
|
||||
verbose: 2
|
||||
|
||||
# Use colored output
|
||||
colored_console: false
|
||||
|
||||
|
||||
# Miscellaneous configuration
|
||||
# ---------------------------
|
||||
|
||||
# Enable reloading after a change in one of the configuration files
|
||||
reload: true
|
||||
|
||||
# Address to listen for all services
|
||||
listener_address: 0.0.0.0
|
||||
|
||||
|
||||
# SAP instance configuration
|
||||
# --------------------------
|
||||
|
||||
# Release version
|
||||
release: "720"
|
||||
|
||||
|
||||
# Services configuration
|
||||
# ----------------------
|
||||
|
||||
services:
|
||||
-
|
||||
# SAP Router configuration
|
||||
# ------------------------
|
||||
service: SAPRouterService
|
||||
alias: ExternalSAPRouter
|
||||
enabled: yes
|
||||
listener_port: 3299
|
||||
|
||||
# Router version number
|
||||
router_version: 40
|
||||
|
||||
# Router patch version
|
||||
router_version_patch: 4
|
||||
|
||||
# Password for information requests. If present it will be required
|
||||
info_password:
|
||||
|
||||
# Wether the external administration would be enabled on this SAP Router
|
||||
external_admin: false
|
||||
|
||||
# Route table file
|
||||
route_table: !include external_route_table.yml
|
||||
|
||||
# Hostname for the SAP Router
|
||||
hostname: saprouter
|
||||
|
||||
-
|
||||
# SAP Dispatcher configuration
|
||||
# ----------------------------
|
||||
service: SAPDispatcherService
|
||||
alias: InternalDispatcherService
|
||||
enabled: yes
|
||||
virtual: yes
|
||||
listener_port: 3200
|
||||
listener_address: 10.0.0.100
|
||||
|
||||
# Name of the instance
|
||||
instance: NSP
|
||||
|
||||
# Client number
|
||||
client_no: "001"
|
||||
|
||||
# SID
|
||||
sid: PRD
|
||||
|
||||
# Hostname
|
||||
hostname: uscasf-sap01
|
||||
|
||||
|
||||
# Feeds configuration
|
||||
# -------------------
|
||||
|
||||
feeds:
|
||||
-
|
||||
feed: LogFeed
|
||||
log_filename: log/honeysap-external.log
|
||||
enabled: yes
|
||||
-
|
||||
feed: ConsoleFeed
|
||||
enabled: yes
|
||||
-
|
||||
feed: HPFeed
|
||||
channels:
|
||||
- honeysap.events
|
||||
feed_host: 10.250.250.20
|
||||
feed_port: 20000
|
||||
feed_ident: honeysap
|
||||
feed_secret: password
|
||||
enabled: no
|
19
docker/deprecated/honeysap/docker-compose.yml
Normal file
19
docker/deprecated/honeysap/docker-compose.yml
Normal file
@ -0,0 +1,19 @@
|
||||
version: '2.3'
|
||||
|
||||
networks:
|
||||
honeysap_local:
|
||||
|
||||
services:
|
||||
|
||||
# HoneySAP service
|
||||
honeysap:
|
||||
build: .
|
||||
container_name: honeysap
|
||||
restart: always
|
||||
networks:
|
||||
- honeysap_local
|
||||
ports:
|
||||
- "3299:3299"
|
||||
image: "dtagdevsec/honeysap:2203"
|
||||
volumes:
|
||||
- /data/honeysap/log:/opt/honeysap/log
|
59
docker/deprecated/rdpy/Dockerfile
Normal file
59
docker/deprecated/rdpy/Dockerfile
Normal file
@ -0,0 +1,59 @@
|
||||
FROM alpine:3.11
|
||||
#
|
||||
# Include dist
|
||||
ADD dist/ /root/dist/
|
||||
#
|
||||
# Get and install dependencies & packages
|
||||
RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
|
||||
apk -U add \
|
||||
build-base \
|
||||
git \
|
||||
libffi-dev \
|
||||
openssl \
|
||||
openssl-dev \
|
||||
python \
|
||||
python-dev \
|
||||
py-pip \
|
||||
py-setuptools && \
|
||||
#
|
||||
# Setup user
|
||||
addgroup -g 2000 rdpy && \
|
||||
adduser -S -s /bin/ash -u 2000 -D -g 2000 rdpy && \
|
||||
#
|
||||
# Install deps
|
||||
pip install --no-cache-dir --upgrade cffi && \
|
||||
pip install --no-cache-dir \
|
||||
hpfeeds \
|
||||
twisted \
|
||||
pyopenssl \
|
||||
qt4reactor \
|
||||
service_identity \
|
||||
rsa==4.5 \
|
||||
pyasn1 && \
|
||||
#
|
||||
# Install rdpy from git
|
||||
mkdir -p /opt && \
|
||||
cd /opt && \
|
||||
git clone https://github.com/t3chn0m4g3/rdpy && \
|
||||
cd rdpy && \
|
||||
git checkout 1d2a4132aefe0637d09cac1a6ab83ec5391f40ca && \
|
||||
python setup.py install && \
|
||||
#
|
||||
# Setup user, groups and configs
|
||||
cp /root/dist/* /opt/rdpy/ && \
|
||||
chown rdpy:rdpy -R /opt/rdpy/* && \
|
||||
mkdir -p /var/log/rdpy && \
|
||||
#
|
||||
# Clean up
|
||||
rm -rf /root/* && \
|
||||
apk del --purge build-base \
|
||||
git \
|
||||
libffi-dev \
|
||||
openssl-dev \
|
||||
python-dev \
|
||||
py-pip && \
|
||||
rm -rf /var/cache/apk/*
|
||||
#
|
||||
# Start rdpy
|
||||
USER rdpy:rdpy
|
||||
CMD exec /usr/bin/python2 -i /usr/bin/rdpy-rdphoneypot.py /opt/rdpy/$(shuf -i 1-3 -n 1) >> /var/log/rdpy/rdpy.log
|
BIN
docker/deprecated/rdpy/dist/1
vendored
Normal file
BIN
docker/deprecated/rdpy/dist/1
vendored
Normal file
Binary file not shown.
BIN
docker/deprecated/rdpy/dist/2
vendored
Normal file
BIN
docker/deprecated/rdpy/dist/2
vendored
Normal file
Binary file not shown.
BIN
docker/deprecated/rdpy/dist/3
vendored
Normal file
BIN
docker/deprecated/rdpy/dist/3
vendored
Normal file
Binary file not shown.
28
docker/deprecated/rdpy/docker-compose.yml
Normal file
28
docker/deprecated/rdpy/docker-compose.yml
Normal file
@ -0,0 +1,28 @@
|
||||
version: '2.3'
|
||||
|
||||
networks:
|
||||
rdpy_local:
|
||||
|
||||
services:
|
||||
|
||||
# Rdpy service
|
||||
rdpy:
|
||||
build: .
|
||||
container_name: rdpy
|
||||
extra_hosts:
|
||||
- hpfeeds.example.com:127.0.0.1
|
||||
restart: always
|
||||
environment:
|
||||
- HPFEEDS_SERVER=hpfeeds.example.com
|
||||
- HPFEEDS_IDENT=user
|
||||
- HPFEEDS_SECRET=pass
|
||||
- HPFEEDS_PORT=65000
|
||||
- SERVERID=id
|
||||
networks:
|
||||
- rdpy_local
|
||||
ports:
|
||||
- "3389:3389"
|
||||
image: "dtagdevsec/rdpy:2203"
|
||||
read_only: true
|
||||
volumes:
|
||||
- /data/rdpy/log:/var/log/rdpy
|
Reference in New Issue
Block a user