prepare for T-Pot 16.03

This commit is contained in:
marco
2015-12-08 15:47:39 +01:00
parent 0701b5f2f4
commit f06935fe63
72 changed files with 29029 additions and 459 deletions

View File

@ -0,0 +1,24 @@
########################################################
# T-Pot #
# Cowrie upstart script #
# #
# v0.04 by av, DTAG, 2015-10-07 #
########################################################
description "cowrie"
author "av"
start on started docker and filesystem
stop on runlevel [!2345]
respawn
pre-start script
# Remove any existing cowrie containers
myCID=$(docker ps -a | grep cowrie | awk '{ print $1 }')
if [ "$myCID" != "" ];
then docker rm $myCID;
fi
end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name cowrie --rm=true -p 22:2222 -v /data:/data dtagdevsec/cowrie:latest1603
end script

View File

@ -1,13 +1,13 @@
########################################################
# T-Pot Community Edition #
# T-Pot #
# Dionaea upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
# v0.04 by mo, DTAG, 2015-12-08 #
########################################################
description "Dionaea"
author "mo"
start on (started docker and filesystem)
start on started docker and filesystem
stop on runlevel [!2345]
respawn
pre-start script
@ -20,7 +20,7 @@ end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name dionaea --cap-add=NET_BIND_SERVICE --rm=true -p 21:21 -p 42:42 -p 8080:80 -p 135:135 -p 443:443 -p 445:445 -p 1433:1433 -p 3306:3306 -p 5061:5061 -p 5060:5060 -p 69:69/udp -p 5060:5060/udp -v /data/dionaea dtagdevsec/dionaea
/usr/bin/docker run --name dionaea --cap-add=NET_BIND_SERVICE --rm=true -p 21:21 -p 42:42 -p 8080:80 -p 135:135 -p 443:443 -p 445:445 -p 1433:1433 -p 3306:3306 -p 5061:5061 -p 5060:5060 -p 69:69/udp -p 5060:5060/udp -v /data:/data dtagdevsec/dionaea:latest1603
end script
post-start script
sleep $(((RANDOM % 5)+5))

View File

@ -1,13 +1,13 @@
########################################################
# T-Pot Community Edition #
# T-Pot #
# ELK upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
# v0.04 by mo, DTAG, 2015-12-08 #
########################################################
description "ELK"
author "mo"
start on (started docker and filesystem and started ews and started dionaea and started glastopf and started honeytrap and started kippo and started suricata)
start on started docker and filesystem
stop on runlevel [!2345]
respawn
pre-start script
@ -20,7 +20,7 @@ end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name=elk --volumes-from ews --volumes-from suricata -v /data/elk/:/data/elk/ -p 127.0.0.1:64296:8080 --rm=true dtagdevsec/elk
/usr/bin/docker run --name=elk -v /data:/data -p 127.0.0.1:64296:8080 --rm=true dtagdevsec/elk:latest1603
end script
post-start script
sleep $(((RANDOM % 5)+5))

View File

@ -1,27 +0,0 @@
########################################################
# T-Pot Community Edition #
# EWS upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
########################################################
description "EWS"
author "mo"
start on (started docker and filesystem and started dionaea and started glastopf and started honeytrap and started kippo)
stop on runlevel [!2345]
respawn
pre-start script
# Remove any existing ews containers
myCID=$(docker ps -a | grep ews | awk '{ print $1 }')
if [ "$myCID" != "" ];
then docker rm -v $myCID;
fi
end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name ews --volumes-from dionaea --volumes-from glastopf --volumes-from honeytrap --volumes-from kippo --rm=true -v /data/ews/conf/:/data/ews/conf/ -v /data/ews/ --link kippo:kippo dtagdevsec/ews
end script
post-start script
sleep $(((RANDOM % 5)+5))
end script

View File

@ -1,13 +1,13 @@
########################################################
# T-Pot Community Edition #
# T-Pot #
# Glastopf upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
# v0.04 by mo, DTAG, 2015-12-08 #
########################################################
description "Glastopf"
author "mo"
start on (started docker and filesystem)
start on started docker and filesystem
stop on runlevel [!2345]
respawn
pre-start script
@ -20,7 +20,7 @@ end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name glastopf --rm=true -p 80:80 -v /data/glastopf dtagdevsec/glastopf
/usr/bin/docker run --name glastopf --rm=true -v /data:/data -p 80:80 dtagdevsec/glastopf:latest1603
end script
post-start script
sleep $(((RANDOM % 5)+5))

View File

@ -1,8 +1,8 @@
########################################################
# T-Pot Community Edition #
# T-Pot #
# Honeytrap upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
# v0.04 by mo, DTAG, 2015-12-08 #
########################################################
description "Honeytrap"
@ -21,7 +21,7 @@ end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name honeytrap --cap-add=NET_ADMIN --net=host --rm=true -v /data/honeytrap dtagdevsec/honeytrap
/usr/bin/docker run --name honeytrap --cap-add=NET_ADMIN --net=host --rm=true -v /data:/data dtagdevsec/honeytrap:latest1603
end script
post-start script
sleep $(((RANDOM % 5)+5))

View File

@ -1,27 +0,0 @@
########################################################
# T-Pot Community Edition #
# Kippo upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
########################################################
description "Kippo"
author "mo"
start on (started docker and filesystem)
stop on runlevel [!2345]
respawn
pre-start script
# Remove any existing kippo containers
myCID=$(docker ps -a | grep kippo | awk '{ print $1 }')
if [ "$myCID" != "" ];
then docker rm -v $myCID;
fi
end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name kippo --rm=true -p 22:2222 -v /data/kippo dtagdevsec/kippo
end script
post-start script
sleep $(((RANDOM % 5)+5))
end script

View File

@ -1,8 +1,8 @@
########################################################
# T-Pot Community Edition #
# T-Pot #
# Suricata upstart script #
# #
# v0.53 by mo, DTAG, 2015-11-02 #
# v0.04 by mo, DTAG, 2015-12-08 #
########################################################
description "Suricata"
@ -24,7 +24,7 @@ end script
script
# Delayed start to avoid rapid respawning
sleep $(((RANDOM % 5)+5))
/usr/bin/docker run --name suricata --cap-add=NET_ADMIN --net=host --rm=true -v /data/suricata/ dtagdevsec/suricata
/usr/bin/docker run --name suricata --cap-add=NET_ADMIN --net=host --rm=true -v /data:/data dtagdevsec/suricata:latest1603
end script
post-start script
sleep $(((RANDOM % 5)+5))