mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-07-02 01:27:27 -04:00
cleanup and prepare for docker image rebuilds
This commit is contained in:
34
docker/deprecated/elasticpot.old/Dockerfile
Normal file
34
docker/deprecated/elasticpot.old/Dockerfile
Normal file
@ -0,0 +1,34 @@
|
||||
FROM alpine:latest
|
||||
#
|
||||
# Include dist
|
||||
ADD dist/ /root/dist/
|
||||
#
|
||||
# Install packages
|
||||
RUN apk -U --no-cache add \
|
||||
git \
|
||||
py3-pip \
|
||||
python3 && \
|
||||
pip3 install --no-cache-dir bottle \
|
||||
configparser \
|
||||
datetime \
|
||||
requests && \
|
||||
mkdir -p /opt && \
|
||||
cd /opt/ && \
|
||||
git clone --depth=1 https://github.com/schmalle/ElasticpotPY.git && \
|
||||
#
|
||||
# Setup user, groups and configs
|
||||
addgroup -g 2000 elasticpot && \
|
||||
adduser -S -H -s /bin/ash -u 2000 -D -g 2000 elasticpot && \
|
||||
mv /root/dist/elasticpot.cfg /opt/ElasticpotPY/ && \
|
||||
mkdir /opt/ElasticpotPY/log && \
|
||||
#
|
||||
# Clean up
|
||||
apk del --purge git && \
|
||||
rm -rf /root/* && \
|
||||
rm -rf /var/cache/apk/*
|
||||
#
|
||||
# Start elasticpot
|
||||
STOPSIGNAL SIGINT
|
||||
USER elasticpot:elasticpot
|
||||
WORKDIR /opt/ElasticpotPY/
|
||||
CMD ["/usr/bin/python3","main.py"]
|
15
docker/deprecated/elasticpot.old/README.md
Normal file
15
docker/deprecated/elasticpot.old/README.md
Normal file
@ -0,0 +1,15 @@
|
||||
[](https://microbadger.com/images/dtagdevsec/elasticpot:1903 "Get your own version badge on microbadger.com") [](https://microbadger.com/images/dtagdevsec/elasticpot:1903 "Get your own image badge on microbadger.com")
|
||||
|
||||
# elasticpot
|
||||
|
||||
[elasticpot](https://github.com/schmalle/ElasticPot) is a simple elastic search honeypot.
|
||||
|
||||
This dockerized version is part of the **[T-Pot community honeypot](http://dtag-dev-sec.github.io/)** of Deutsche Telekom AG.
|
||||
|
||||
The `Dockerfile` contains the blueprint for the dockerized elasticpot and will be used to setup the docker image.
|
||||
|
||||
The `docker-compose.yml` contains the necessary settings to test elasticpot using `docker-compose`. This will ensure to start the docker container with the appropriate permissions and port mappings.
|
||||
|
||||
# ElasticPot Dashboard
|
||||
|
||||

|
31
docker/deprecated/elasticpot.old/dist/elasticpot.cfg
vendored
Normal file
31
docker/deprecated/elasticpot.old/dist/elasticpot.cfg
vendored
Normal file
@ -0,0 +1,31 @@
|
||||
# ElasticPot Config
|
||||
|
||||
[MAIN]
|
||||
# Manually set the externally accessible IP of the honeypot
|
||||
ip = 192.168.1.1
|
||||
|
||||
|
||||
[ELASTICPOT]
|
||||
# ID pf the elasticpot instance
|
||||
nodeid = elasticpot-community-01
|
||||
|
||||
# Location of the json logfile
|
||||
logfile = log/elasticpot.log
|
||||
|
||||
# Set elasticpot = False to disable json logging and enable automatic attack submission to ews backend (soap)
|
||||
elasticpot = True
|
||||
|
||||
|
||||
[EWS]
|
||||
# Note: Only relevant if "elasticpot = False"
|
||||
# Username for ews submission
|
||||
username = community-01-user
|
||||
|
||||
# Token for ews submission
|
||||
token = foth{a5maiCee8fineu7
|
||||
|
||||
# API endpoint for ews submission
|
||||
rhost_first = https://community.sicherheitstacho.eu/ews-0.1/alert/postSimpleMessage
|
||||
|
||||
# Ignore certificate warnings
|
||||
ignorecert = false
|
BIN
docker/deprecated/elasticpot.old/doc/dashboard.png
Normal file
BIN
docker/deprecated/elasticpot.old/doc/dashboard.png
Normal file
Binary file not shown.
After Width: | Height: | Size: 789 KiB |
20
docker/deprecated/elasticpot.old/docker-compose.yml
Normal file
20
docker/deprecated/elasticpot.old/docker-compose.yml
Normal file
@ -0,0 +1,20 @@
|
||||
version: '2.3'
|
||||
|
||||
networks:
|
||||
elasticpot_local:
|
||||
|
||||
services:
|
||||
|
||||
# Elasticpot service
|
||||
elasticpot:
|
||||
build: .
|
||||
container_name: elasticpot
|
||||
restart: always
|
||||
networks:
|
||||
- elasticpot_local
|
||||
ports:
|
||||
- "9200:9200"
|
||||
image: "dtagdevsec/elasticpot:2006"
|
||||
read_only: true
|
||||
volumes:
|
||||
- /data/elasticpot/log:/opt/ElasticpotPY/log
|
Reference in New Issue
Block a user