anti
cf1e00af28
- HTTP: configurable server_header, response_code, fake_app presets (apache/nginx/wordpress/phpmyadmin/iis), extra_headers, custom_body, static files directory mount - SSH/Cowrie: configurable kernel_version, hardware_platform, ssh_banner, and users/passwords via COWRIE_USERDB_ENTRIES; switched to build mode so cowrie.cfg.j2 persona fields and userdb.txt generation work - SMTP: configurable banner and MTA hostname - MySQL: configurable version string in protocol greeting - Redis: configurable redis_version and os string in INFO response - BYOS: [custom-*] INI sections define bring-your-own Docker services - Stealth: rename all *_honeypot.py → server.py; replace HONEYPOT_NAME env var with NODE_NAME across all 22+ service templates and plugins; strip "honeypot" from all in-container file content - Config: DeckyConfig.service_config dict; INI [decky-N.svc] subsections; composer passes service_cfg to compose_fragment - 350 tests passing (100%) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
53 lines
1.8 KiB
Python
53 lines
1.8 KiB
Python
from pathlib import Path
|
|
from decnet.services.base import BaseService
|
|
|
|
TEMPLATES_DIR = Path(__file__).parent.parent.parent / "templates" / "cowrie"
|
|
|
|
|
|
class SSHService(BaseService):
|
|
name = "ssh"
|
|
ports = [22, 2222]
|
|
default_image = "build"
|
|
|
|
def compose_fragment(
|
|
self,
|
|
decky_name: str,
|
|
log_target: str | None = None,
|
|
service_cfg: dict | None = None,
|
|
) -> dict:
|
|
cfg = service_cfg or {}
|
|
env: dict = {
|
|
"NODE_NAME": decky_name,
|
|
"COWRIE_HOSTNAME": decky_name,
|
|
"COWRIE_HONEYPOT_LISTEN_ENDPOINTS": "tcp:22:interface=0.0.0.0 tcp:2222:interface=0.0.0.0",
|
|
"COWRIE_SSH_LISTEN_ENDPOINTS": "tcp:22:interface=0.0.0.0 tcp:2222:interface=0.0.0.0",
|
|
}
|
|
if log_target:
|
|
host, port = log_target.rsplit(":", 1)
|
|
env["COWRIE_OUTPUT_TCP_ENABLED"] = "true"
|
|
env["COWRIE_OUTPUT_TCP_HOST"] = host
|
|
env["COWRIE_OUTPUT_TCP_PORT"] = port
|
|
|
|
# Optional persona overrides
|
|
if "kernel_version" in cfg:
|
|
env["COWRIE_HONEYPOT_KERNEL_VERSION"] = cfg["kernel_version"]
|
|
if "kernel_build_string" in cfg:
|
|
env["COWRIE_HONEYPOT_KERNEL_BUILD_STRING"] = cfg["kernel_build_string"]
|
|
if "hardware_platform" in cfg:
|
|
env["COWRIE_HONEYPOT_HARDWARE_PLATFORM"] = cfg["hardware_platform"]
|
|
if "ssh_banner" in cfg:
|
|
env["COWRIE_SSH_VERSION"] = cfg["ssh_banner"]
|
|
if "users" in cfg:
|
|
env["COWRIE_USERDB_ENTRIES"] = cfg["users"]
|
|
|
|
return {
|
|
"build": {"context": str(TEMPLATES_DIR)},
|
|
"container_name": f"{decky_name}-ssh",
|
|
"restart": "unless-stopped",
|
|
"cap_add": ["NET_BIND_SERVICE"],
|
|
"environment": env,
|
|
}
|
|
|
|
def dockerfile_context(self) -> Path:
|
|
return TEMPLATES_DIR
|