tweaking honeysap, rdpy, editions, installer

move honeysap, rdpy to deprecated as currently no Py3 version available
remove honeysap, rdpy from editions
adjust installer for running on ARM64 (post-install)
This commit is contained in:
t3chn0m4g3
2022-01-31 16:59:36 +00:00
parent 778c6c6a70
commit b37178ba98
17 changed files with 3 additions and 178 deletions

View File

@ -0,0 +1,44 @@
FROM alpine:3.11
#
# Include dist
ADD dist/ /root/dist/
#
# Install packages
RUN apk -U --no-cache add \
build-base \
git \
libstdc++ \
python2 \
python2-dev \
py2-pip \
tcpdump && \
#
# Clone honeysap from git
# git clone --depth=1 https://github.com/SecureAuthCorp/HoneySAP /opt/honeysap && \
git clone --depth=1 https://github.com/t3chn0m4g3/HoneySAP /opt/honeysap && \
cd /opt/honeysap && \
git checkout a3c355a710d399de9d543659a685effaa70e683d && \
mkdir conf && \
cp /root/dist/* conf/ && \
python setup.py install && \
pip install markupsafe && \
pip install -r requirements-optional.txt && \
#
# Setup user, groups and configs
addgroup -g 2000 honeysap && \
adduser -S -s /bin/ash -u 2000 -D -g 2000 honeysap && \
chown -R honeysap:honeysap /opt/honeysap && \
#
# Clean up
apk del --purge \
build-base \
git \
python2-dev && \
rm -rf /root/* \
/var/cache/apk/*
#
# Set workdir and start honeysap
STOPSIGNAL SIGKILL
USER honeysap:honeysap
WORKDIR /opt/honeysap
CMD ["/opt/honeysap/bin/honeysap", "--config-file", "/opt/honeysap/conf/honeysap.yml"]

View File

@ -0,0 +1,6 @@
# HoneSAP default external profile route table
# ============================================
#
# Allow any protocols to 10.0.0.100 port 3200
- allow,any,10.0.0.100,3200,

View File

@ -0,0 +1,103 @@
# HoneSAP default external profile configuration
# ==============================================
# Console logging configuration
# -----------------------------
# Level of console logging
verbose: 2
# Use colored output
colored_console: false
# Miscellaneous configuration
# ---------------------------
# Enable reloading after a change in one of the configuration files
reload: true
# Address to listen for all services
listener_address: 0.0.0.0
# SAP instance configuration
# --------------------------
# Release version
release: "720"
# Services configuration
# ----------------------
services:
-
# SAP Router configuration
# ------------------------
service: SAPRouterService
alias: ExternalSAPRouter
enabled: yes
listener_port: 3299
# Router version number
router_version: 40
# Router patch version
router_version_patch: 4
# Password for information requests. If present it will be required
info_password:
# Wether the external administration would be enabled on this SAP Router
external_admin: false
# Route table file
route_table: !include external_route_table.yml
# Hostname for the SAP Router
hostname: saprouter
-
# SAP Dispatcher configuration
# ----------------------------
service: SAPDispatcherService
alias: InternalDispatcherService
enabled: yes
virtual: yes
listener_port: 3200
listener_address: 10.0.0.100
# Name of the instance
instance: NSP
# Client number
client_no: "001"
# SID
sid: PRD
# Hostname
hostname: uscasf-sap01
# Feeds configuration
# -------------------
feeds:
-
feed: LogFeed
log_filename: log/honeysap-external.log
enabled: yes
-
feed: ConsoleFeed
enabled: yes
-
feed: HPFeed
channels:
- honeysap.events
feed_host: 10.250.250.20
feed_port: 20000
feed_ident: honeysap
feed_secret: password
enabled: no

View File

@ -0,0 +1,19 @@
version: '2.3'
networks:
honeysap_local:
services:
# HoneySAP service
honeysap:
build: .
container_name: honeysap
restart: always
networks:
- honeysap_local
ports:
- "3299:3299"
image: "dtagdevsec/honeysap:2203"
volumes:
- /data/honeysap/log:/opt/honeysap/log

View File

@ -0,0 +1,59 @@
FROM alpine:3.11
#
# Include dist
ADD dist/ /root/dist/
#
# Get and install dependencies & packages
RUN sed -i 's/dl-cdn/dl-2/g' /etc/apk/repositories && \
apk -U add \
build-base \
git \
libffi-dev \
openssl \
openssl-dev \
python \
python-dev \
py-pip \
py-setuptools && \
#
# Setup user
addgroup -g 2000 rdpy && \
adduser -S -s /bin/ash -u 2000 -D -g 2000 rdpy && \
#
# Install deps
pip install --no-cache-dir --upgrade cffi && \
pip install --no-cache-dir \
hpfeeds \
twisted \
pyopenssl \
qt4reactor \
service_identity \
rsa==4.5 \
pyasn1 && \
#
# Install rdpy from git
mkdir -p /opt && \
cd /opt && \
git clone https://github.com/t3chn0m4g3/rdpy && \
cd rdpy && \
git checkout 1d2a4132aefe0637d09cac1a6ab83ec5391f40ca && \
python setup.py install && \
#
# Setup user, groups and configs
cp /root/dist/* /opt/rdpy/ && \
chown rdpy:rdpy -R /opt/rdpy/* && \
mkdir -p /var/log/rdpy && \
#
# Clean up
rm -rf /root/* && \
apk del --purge build-base \
git \
libffi-dev \
openssl-dev \
python-dev \
py-pip && \
rm -rf /var/cache/apk/*
#
# Start rdpy
USER rdpy:rdpy
CMD exec /usr/bin/python2 -i /usr/bin/rdpy-rdphoneypot.py /opt/rdpy/$(shuf -i 1-3 -n 1) >> /var/log/rdpy/rdpy.log

BIN
docker/deprecated/rdpy/dist/1 vendored Normal file

Binary file not shown.

BIN
docker/deprecated/rdpy/dist/2 vendored Normal file

Binary file not shown.

BIN
docker/deprecated/rdpy/dist/3 vendored Normal file

Binary file not shown.

View File

@ -0,0 +1,28 @@
version: '2.3'
networks:
rdpy_local:
services:
# Rdpy service
rdpy:
build: .
container_name: rdpy
extra_hosts:
- hpfeeds.example.com:127.0.0.1
restart: always
environment:
- HPFEEDS_SERVER=hpfeeds.example.com
- HPFEEDS_IDENT=user
- HPFEEDS_SECRET=pass
- HPFEEDS_PORT=65000
- SERVERID=id
networks:
- rdpy_local
ports:
- "3389:3389"
image: "dtagdevsec/rdpy:2203"
read_only: true
volumes:
- /data/rdpy/log:/var/log/rdpy