767 Commits

Author SHA1 Message Date
e31fbeb6f0 pin beelzebub docker build to go 1.20 2024-09-09 16:52:52 +02:00
024d79d001 Continue work on builder
- add conditional proxy support
- use xargs to parallelize image builds
- some tweaking and notes
2024-09-07 00:35:04 +00:00
acf09bc160 fix build pipeline issue with Kibana
- qemu-aarch64: /usr/share/kibana/bin/../node/bin/node: PT_GNU_PROPERTY too large
- Kibana's packaged node is the culprit, replacing it fixes build issues with x64 qemu building docker arm64 images
2024-09-06 14:45:51 +00:00
a948337a2f revert to ubuntu 2024-09-05 21:43:07 +00:00
5287224015 continue work on builder 2024-09-05 19:49:52 +00:00
e346316945 adjust config for beelzebub 2024-09-05 16:33:17 +02:00
cec948b083 change pull policy, continue work on new builder 2024-09-05 13:09:35 +00:00
1db52b2591 begin rework builder 2024-09-05 12:38:33 +00:00
429d74472c Add Beelzebub 2024-09-04 21:45:00 +02:00
4191cf24b3 Fix conpot docker image errors
Version of pysmi set to previous release, FtpReader function has been removed from the new release
2024-08-24 22:46:20 +02:00
53314b19a1 bump elastic stack to 8.14.2 2024-07-08 15:46:22 +02:00
025ab2db46 update cowrie 2024-07-02 16:23:42 +02:00
8f3966a675 Remove deprecated version tag from docker compose files
Bump Elastic Stack to 8.13.4
2024-06-19 16:10:03 +02:00
a510e28ef1 Include config option to disable SSL verification
Adjust README accordingly
Fixes #1543
2024-06-04 15:33:28 +02:00
1078ce537d Update Glutton Dockerfile 2024-05-07 14:26:18 +02:00
3f087b0182 Update entrypoint.sh 2024-05-06 19:37:34 +02:00
3b94af2d5e Optimize for linux 2024-05-06 19:22:33 +02:00
99539562f2 Prepare fix for Docker Desktop in Windows 2024-05-05 18:57:59 +02:00
caca93f3a0 #1531, but needs testing 2024-05-02 13:43:16 +02:00
775bc2c1dd update hptest.sh 2024-04-29 19:03:49 +02:00
85431b308d add 24.04 version tag 2024-03-24 19:22:37 +01:00
cf5df3b60b continue with documentation
fix tpotinit entrypoint.sh to resolve a conflict with sensor deployment where data folder is not yet owned by tpot user
2024-03-22 20:47:39 +01:00
e21eb1aef6 begin with documentation 2024-03-21 19:32:10 +01:00
234fb16394 tweaking
where possible kibana visualizations are converted to lens objects (more than 100 objects)
all dashboards have been updated
fixes #1392 for leaving SentryPeer log tag out
add wordpot dashboard
after discussion (#1486) and testing iptables-legacy is no longer required
include all kibana objects for installation
cleaning up some service scripts
2024-03-18 16:19:49 +01:00
3546e31a7c tweaking 2024-03-15 22:41:12 +01:00
fe5eac0104 add genuser.sh, fix errors
macOS and Windows might not have htpasswd tools available, so adding this to the tpotinit image. users can run genuser.sh which simply contains a docker command to run tpotinit to create a user and add it to the T-Pot config (.env).
Fix an issue where WEB_USER was added with hyphens
Fix issues where shebang was incorrect
Update .env / env.example
2024-03-13 16:30:17 +01:00
1e5e57a52b fix git tree error 2024-03-12 17:37:23 +01:00
540d5574d1 cleanup, tweaking, updating
make tpotinit aware of sigterm events to unload blackhole routes, firewall rules
fixes #1204 where citrixhoneypot logs use logs instead of log folder
bump ELK stack to 8.12.2
add wordpot logs to logstash pipeline
bump t-pot attackmap to 2.2.0, alpine 3.19
2024-03-12 17:03:43 +01:00
1da35284be update, tweaking, add
add wordpot incl. json logging with activated plugins
bump snare, tanner, phpox, tanner_redis to latest master and to alpine 3.19
2024-03-11 17:33:53 +01:00
4baac7ac04 update esvue, cleanup 2024-03-11 09:45:01 +01:00
97adcbeb1b tweaking
updating .env, env.example and compose files regarding sentrypeer ENVs
make glutton image aware of payloads feature
bump glutton to latest master, alpine 3.19, multi-stage build
bump ipphoney to alpine 3.19
bump mailoney to alpine 3.19, adjust for py3
revert medpot to previous master, use multi stage build and alpine 3.19
bump cyberchef to latest master
bump ngninx to alpine 3.19
bump p0f to alpine 3.19, use multi stage build
bump redishoneypot to alpine 3.19, use multi stage build
bump sentrypeer to latest master, fix bug for open ports in compose files, now all tcp/5060, udp/5060 traffic will be seen
bump spiderfoot to latest master
bump spiderfoot to alpine 3.19
bump suricata to 7.0.2, fix performance issue with capture-filter-bpf by reducing the rules
update clean.sh to include glutton payloads folder
2024-03-09 12:11:14 +01:00
c45870594b tweaking
multi stage build for dicompot
rebuild fatt, glutton, hellpot, honeypots for alpine 3.19
bump glutton, hellpot, honeypots to latest master
2024-03-05 19:50:35 +01:00
519a101fdf tweaking 2024-02-28 21:05:03 +01:00
be74fc75ca tweaking
healthcheck, watch pid not cpu
cleanup dockerfiles
bump dicompot, heralding, elasticpot, endlessh to alpine 3.19
bump dionaea, heralding to latest master
2024-02-28 19:07:22 +01:00
285b37a00d cleanup 2024-02-27 20:28:07 +01:00
f9a9c8c4bf tweak deploy, add autoheal, start update Dockerfiles
- tweak deploy a little further
- start with rebuilding Dockerfiles
- rework healthcheck for adbhoney CPU issues
- bump adbhoney, ciscoasa, citrixhoneypot, conpot, cowriepot, ddospot to alpine 3.19
- fix conpot issue with py 3.11
- bump conpot to latest master
- bump cowrie to latest master
- add autoheal to tpotinit to restart unhealthy container (if healthcheck enabled)
2024-02-27 20:23:30 +01:00
31f09413e0 continue working on env, tpotinit and deploy 2024-02-23 16:41:52 +01:00
4f41b84103 Adjust T-Pot config file, tpotinit
fix logrotate.conf path
add tpotinit logging
add support for LS_WEB_USER in tpot config (.env)
make tpotinit always validate config / adjust users on tpotinit start
2024-02-19 17:34:14 +01:00
09b75cb5be Start working on new landing page
Remove old code
2024-02-16 19:32:02 +01:00
0dda858ac1 Start working on new landing page
Remove old code
2024-02-16 19:15:17 +01:00
0c9b58b6ac Remove Cockpit 2024-02-15 18:32:16 +01:00
380ade13a3 make heralding work with py3.10+ 2024-02-14 22:47:41 +01:00
e94f70a15f Revert to medpot (75a2e6134cf926c35b6017d62542274434c87388) from 2 years ago since current master is broken. 2024-02-14 21:14:40 +01:00
8bbfe7ac62 Fix manuf location 2024-02-14 20:16:13 +01:00
7ae6c73b88 Testing and developing in alpha branch 2024-02-14 19:23:25 +01:00
efd5465837 work on permissions, folders and tpotinit 2024-02-14 19:04:05 +01:00
ef2f5b3f93 Rework .env / env.example
Add more functions to customizer.py (improve port and service checks, improve user output)
Adjust docker-compose files
2024-02-13 19:02:40 +01:00
2fe2d59129 remove auto reload 2024-01-05 22:07:19 +01:00
7ba5567e70 add logstash http_input support for nginx
remove cockpit support entirely
cleanup / housekeeping
2024-01-05 21:31:13 +01:00
1da37b5f85 re-implement distributed feature, without ssh
add sensor compose file
add distributed option to tpot config
housekeeping / cleanup
2024-01-05 20:19:50 +01:00