rdphoneypot 2.0.0__tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (108) hide show
  1. rdphoneypot-2.0.0/CHANGELOG.md +93 -0
  2. rdphoneypot-2.0.0/LICENSE +674 -0
  3. rdphoneypot-2.0.0/MANIFEST.in +10 -0
  4. rdphoneypot-2.0.0/PKG-INFO +163 -0
  5. rdphoneypot-2.0.0/README.md +19 -0
  6. rdphoneypot-2.0.0/core/__init__.py +0 -0
  7. rdphoneypot-2.0.0/core/config.py +37 -0
  8. rdphoneypot-2.0.0/core/httpclient.py +71 -0
  9. rdphoneypot-2.0.0/core/logfile.py +75 -0
  10. rdphoneypot-2.0.0/core/output.py +41 -0
  11. rdphoneypot-2.0.0/core/paths.py +54 -0
  12. rdphoneypot-2.0.0/core/protocol.py +318 -0
  13. rdphoneypot-2.0.0/core/tools.py +164 -0
  14. rdphoneypot-2.0.0/honeypot.py +272 -0
  15. rdphoneypot-2.0.0/output_plugins/README.md +21 -0
  16. rdphoneypot-2.0.0/output_plugins/__init__.py +0 -0
  17. rdphoneypot-2.0.0/output_plugins/couch.py +72 -0
  18. rdphoneypot-2.0.0/output_plugins/datadog.py +71 -0
  19. rdphoneypot-2.0.0/output_plugins/discord.py +116 -0
  20. rdphoneypot-2.0.0/output_plugins/elastic.py +139 -0
  21. rdphoneypot-2.0.0/output_plugins/hpfeed.py +43 -0
  22. rdphoneypot-2.0.0/output_plugins/influx2.py +58 -0
  23. rdphoneypot-2.0.0/output_plugins/jsonlog.py +36 -0
  24. rdphoneypot-2.0.0/output_plugins/kafka.py +57 -0
  25. rdphoneypot-2.0.0/output_plugins/localsyslog.py +64 -0
  26. rdphoneypot-2.0.0/output_plugins/mongodb.py +83 -0
  27. rdphoneypot-2.0.0/output_plugins/mysql.py +253 -0
  28. rdphoneypot-2.0.0/output_plugins/nlcvapi.py +125 -0
  29. rdphoneypot-2.0.0/output_plugins/postgres.py +198 -0
  30. rdphoneypot-2.0.0/output_plugins/redisdb.py +49 -0
  31. rdphoneypot-2.0.0/output_plugins/rethinkdblog.py +46 -0
  32. rdphoneypot-2.0.0/output_plugins/slack.py +79 -0
  33. rdphoneypot-2.0.0/output_plugins/socketlog.py +40 -0
  34. rdphoneypot-2.0.0/output_plugins/sqlite.py +201 -0
  35. rdphoneypot-2.0.0/output_plugins/telegram.py +123 -0
  36. rdphoneypot-2.0.0/output_plugins/textlog.py +31 -0
  37. rdphoneypot-2.0.0/output_plugins/xmpp.py +178 -0
  38. rdphoneypot-2.0.0/rdphoneypot/__init__.py +26 -0
  39. rdphoneypot-2.0.0/rdphoneypot/cli.py +528 -0
  40. rdphoneypot-2.0.0/rdphoneypot/data/Dockerfile +57 -0
  41. rdphoneypot-2.0.0/rdphoneypot/data/docs/INSTALL.md +411 -0
  42. rdphoneypot-2.0.0/rdphoneypot/data/docs/INSTALLWIN.md +418 -0
  43. rdphoneypot-2.0.0/rdphoneypot/data/docs/PLUGINS.md +21 -0
  44. rdphoneypot-2.0.0/rdphoneypot/data/docs/TODO.md +8 -0
  45. rdphoneypot-2.0.0/rdphoneypot/data/docs/datadog/README.md +32 -0
  46. rdphoneypot-2.0.0/rdphoneypot/data/docs/discord/README.md +58 -0
  47. rdphoneypot-2.0.0/rdphoneypot/data/docs/geoipupdtask.ps1 +270 -0
  48. rdphoneypot-2.0.0/rdphoneypot/data/docs/mysql/README.md +176 -0
  49. rdphoneypot-2.0.0/rdphoneypot/data/docs/mysql/READMEWIN.md +157 -0
  50. rdphoneypot-2.0.0/rdphoneypot/data/docs/mysql/mysql.sql +72 -0
  51. rdphoneypot-2.0.0/rdphoneypot/data/docs/postgres/README.md +184 -0
  52. rdphoneypot-2.0.0/rdphoneypot/data/docs/postgres/READMEWIN.md +196 -0
  53. rdphoneypot-2.0.0/rdphoneypot/data/docs/postgres/postgres.sql +65 -0
  54. rdphoneypot-2.0.0/rdphoneypot/data/docs/slack/README.md +68 -0
  55. rdphoneypot-2.0.0/rdphoneypot/data/docs/sqlite3/README.md +131 -0
  56. rdphoneypot-2.0.0/rdphoneypot/data/docs/sqlite3/READMEWIN.md +123 -0
  57. rdphoneypot-2.0.0/rdphoneypot/data/docs/sqlite3/sqlite3.sql +61 -0
  58. rdphoneypot-2.0.0/rdphoneypot/data/docs/telegram/README.md +103 -0
  59. rdphoneypot-2.0.0/rdphoneypot/data/etc/honeypot.cfg.base +486 -0
  60. rdphoneypot-2.0.0/rdphoneypot/data/responses/1.rss +0 -0
  61. rdphoneypot-2.0.0/rdphoneypot/data/responses/2.rss +0 -0
  62. rdphoneypot-2.0.0/rdphoneypot/data/responses/3.rss +0 -0
  63. rdphoneypot-2.0.0/rdphoneypot/data/test/test.py +169 -0
  64. rdphoneypot-2.0.0/rdphoneypot/honeypot.py +272 -0
  65. rdphoneypot-2.0.0/rdphoneypot.egg-info/PKG-INFO +163 -0
  66. rdphoneypot-2.0.0/rdphoneypot.egg-info/SOURCES.txt +106 -0
  67. rdphoneypot-2.0.0/rdphoneypot.egg-info/dependency_links.txt +1 -0
  68. rdphoneypot-2.0.0/rdphoneypot.egg-info/entry_points.txt +2 -0
  69. rdphoneypot-2.0.0/rdphoneypot.egg-info/requires.txt +166 -0
  70. rdphoneypot-2.0.0/rdphoneypot.egg-info/top_level.txt +4 -0
  71. rdphoneypot-2.0.0/rdpy/__init__.py +0 -0
  72. rdphoneypot-2.0.0/rdpy/core/__init__.py +0 -0
  73. rdphoneypot-2.0.0/rdpy/core/error.py +105 -0
  74. rdphoneypot-2.0.0/rdpy/core/filetimes.py +105 -0
  75. rdphoneypot-2.0.0/rdpy/core/layer.py +267 -0
  76. rdphoneypot-2.0.0/rdpy/core/log.py +80 -0
  77. rdphoneypot-2.0.0/rdpy/core/rss.py +312 -0
  78. rdphoneypot-2.0.0/rdpy/core/runtime_info.py +4 -0
  79. rdphoneypot-2.0.0/rdpy/core/type.py +1137 -0
  80. rdphoneypot-2.0.0/rdpy/protocol/__init__.py +0 -0
  81. rdphoneypot-2.0.0/rdpy/protocol/rdp/__init__.py +0 -0
  82. rdphoneypot-2.0.0/rdpy/protocol/rdp/lic.py +355 -0
  83. rdphoneypot-2.0.0/rdpy/protocol/rdp/nla/__init__.py +0 -0
  84. rdphoneypot-2.0.0/rdpy/protocol/rdp/nla/cssp.py +567 -0
  85. rdphoneypot-2.0.0/rdpy/protocol/rdp/nla/md4.py +73 -0
  86. rdphoneypot-2.0.0/rdpy/protocol/rdp/nla/ntlm.py +649 -0
  87. rdphoneypot-2.0.0/rdpy/protocol/rdp/nla/sspi.py +72 -0
  88. rdphoneypot-2.0.0/rdpy/protocol/rdp/pdu/__init__.py +0 -0
  89. rdphoneypot-2.0.0/rdpy/protocol/rdp/pdu/caps.py +545 -0
  90. rdphoneypot-2.0.0/rdpy/protocol/rdp/pdu/data.py +988 -0
  91. rdphoneypot-2.0.0/rdpy/protocol/rdp/pdu/layer.py +620 -0
  92. rdphoneypot-2.0.0/rdpy/protocol/rdp/pdu/order.py +132 -0
  93. rdphoneypot-2.0.0/rdpy/protocol/rdp/rdp.py +751 -0
  94. rdphoneypot-2.0.0/rdpy/protocol/rdp/sec.py +769 -0
  95. rdphoneypot-2.0.0/rdpy/protocol/rdp/t125/__init__.py +0 -0
  96. rdphoneypot-2.0.0/rdpy/protocol/rdp/t125/ber.py +263 -0
  97. rdphoneypot-2.0.0/rdpy/protocol/rdp/t125/gcc.py +621 -0
  98. rdphoneypot-2.0.0/rdpy/protocol/rdp/t125/mcs.py +677 -0
  99. rdphoneypot-2.0.0/rdpy/protocol/rdp/t125/per.py +310 -0
  100. rdphoneypot-2.0.0/rdpy/protocol/rdp/tpkt.py +259 -0
  101. rdphoneypot-2.0.0/rdpy/protocol/rdp/x224.py +444 -0
  102. rdphoneypot-2.0.0/rdpy/security/__init__.py +0 -0
  103. rdphoneypot-2.0.0/rdpy/security/pyDes.py +852 -0
  104. rdphoneypot-2.0.0/rdpy/security/rc4.py +63 -0
  105. rdphoneypot-2.0.0/rdpy/security/rsa_wrapper.py +112 -0
  106. rdphoneypot-2.0.0/rdpy/security/x509.py +157 -0
  107. rdphoneypot-2.0.0/setup.cfg +4 -0
  108. rdphoneypot-2.0.0/setup.py +318 -0
rdphoneypot-2.0.0/CHANGELOG.md ADDED
@@ -0,0 +1,93 @@
1
+ # Changelog
2
+
3
+ All notable changes to this project will be documented in this file.
4
+
5
+ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
+ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
+
8
+ ## [2.0.0]
9
+
10
+ ### Added in version 2.0.0
11
+
12
+ * Made the project installable from PyPI
13
+ * Full compatibility with Python 3.x
14
+ * Blacklist sanity checks
15
+ * InfluxDB 2.0 output plugin (Python 3.x only)
16
+ * Test script
17
+ * Use SSL connections by default
18
+ * Generate its own self-signed certificate, if needed
19
+
20
+ ### Changed in version 2.0.0
21
+
22
+ * Increased the version number
23
+ * Updated the documentation with information how to start the honeypot at boot
24
+ time
25
+ * Fixed a tremendous amount of bugs in the protocol implementation that were
26
+ causing the attackers to disonnect immediately without supplying any
27
+ credentials
28
+ * Completely rewritten `Dockerfile`, uses hardened images
29
+ * Better error checking if another process is already listening to the same port
30
+ * The `datadog`, `discord`, `nlcvapi`, and `telegram` plugins now use a secure
31
+ connection (HTTPS) by default
32
+ * The `elastic` plugin now warns if the `ssl` is set while certificate
33
+ verification (`verify_certs`) is off
34
+ * The `couch` plugin now uses authentication mechanism that does not pass the
35
+ username and password in the URL
36
+
37
+ ## [1.0.2]
38
+
39
+ ### Added in version 1.0.2
40
+
41
+ * `.gitlab-ci.yml` file to scan for secrets
42
+
43
+ ### Changed in version 1.0.2
44
+
45
+ * Increased the version number
46
+ * Fixed a bug in the PostgreSQL output plugin
47
+ * Minor fixes to the honeypot control script
48
+
49
+ ## [1.0.1]
50
+
51
+ ### Added in version 1.0.1
52
+
53
+ * Output plugins for
54
+ * CouchDB
55
+ * Datadog
56
+ * Discord
57
+ * ElasticSearch
58
+ * HPFeeds
59
+ * Kafka
60
+ * MongoDB
61
+ * The NLCV-BAS honeypot data aggregation API
62
+ * PostgreSQL
63
+ * RedisDB
64
+ * RethinkDB
65
+ * Slack
66
+ * socket
67
+ * SQLite3
68
+ * Syslog
69
+ * Telegram
70
+ * Text file
71
+ * XMPP
72
+
73
+ ### Changed in version 1.0.1
74
+
75
+ * Increased the version number
76
+ * Improved the Docker file
77
+ * Got rid of the deprecated `utcfromtimestamp` function
78
+ * Updated the documentation
79
+
80
+ ## [1.0.0]
81
+
82
+ ### Added
83
+
84
+ * Initial release
85
+ * Docker image
86
+ * Config file support
87
+ * Various command-line options
88
+ * A script for starting, stopping, and restarting the honeypot
89
+ * Ability to use a random RSS file from a directory of available ones
90
+ * Output plugins
91
+ * Output plugin for JSON
92
+ * Output plugin for MySQL
93
+ * Log rotation