honeynet / ansible-role-tpotce Goto Github PK

License: GNU General Public License v3.0

Python 3.48% Jinja 96.52%

ansible-role-tpotce's Issues

Configure NTP

echo "### Ensure ntp.service is not listening to avoid potential port conflict with ddospot."
myNTP_IF_DISABLE="interface ignore wildcard
interface ignore 127.0.0.1
interface ignore ::1"

if [ "$(cat /etc/ntp.conf | grep "interface ignore wildcard" | wc -l)" != "1" ];
  then
    echo "### Found active ntp listeners and updating config."
    echo "$myNTP_IF_DISABLE" | tee -a /etc/ntp.conf
    echo "### Restarting ntp.service for changes to take effect."
    systemctl stop ntp.service
    systemctl start ntp.service
  else
    echo "### Found no active ntp listeners."
fi

Update sshd config

Match Group tpotlogs
        PermitOpen 127.0.0.1:64305
        ForceCommand /usr/bin/false

Make tpotlogs group

addgroup tpotlogs

SSH key deply to hive

sshpass -e ssh -4 -t -T -l "$MY_TPOT_USERNAME" -p 64295 "$MY_HIVE_IP" << EOF
echo "$SSHPASS" | sudo -S bash -c 'useradd -m -s /sbin/nologin -G tpotlogs "$MY_HIVE_USERNAME";
mkdir -p /home/"$MY_HIVE_USERNAME"/.ssh;
echo "$MY_POT_PUBLICKEY" >> /home/"$MY_HIVE_USERNAME"/.ssh/authorized_keys;
chmod 600 /home/"$MY_HIVE_USERNAME"/.ssh/authorized_keys;
chmod 755 /home/"$MY_HIVE_USERNAME"/.ssh;
chown "$MY_HIVE_USERNAME":"$MY_HIVE_USERNAME" -R /home/"$MY_HIVE_USERNAME"/.ssh'

Recommend Projects