anti
cf1e00af28
- HTTP: configurable server_header, response_code, fake_app presets (apache/nginx/wordpress/phpmyadmin/iis), extra_headers, custom_body, static files directory mount - SSH/Cowrie: configurable kernel_version, hardware_platform, ssh_banner, and users/passwords via COWRIE_USERDB_ENTRIES; switched to build mode so cowrie.cfg.j2 persona fields and userdb.txt generation work - SMTP: configurable banner and MTA hostname - MySQL: configurable version string in protocol greeting - Redis: configurable redis_version and os string in INFO response - BYOS: [custom-*] INI sections define bring-your-own Docker services - Stealth: rename all *_honeypot.py → server.py; replace HONEYPOT_NAME env var with NODE_NAME across all 22+ service templates and plugins; strip "honeypot" from all in-container file content - Config: DeckyConfig.service_config dict; INI [decky-N.svc] subsections; composer passes service_cfg to compose_fragment - 350 tests passing (100%) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
122 lines
3.7 KiB
Python
122 lines
3.7 KiB
Python
"""
|
|
Parse DECNET INI deployment config files.
|
|
|
|
Format:
|
|
[general]
|
|
net=192.168.1.0/24
|
|
gw=192.168.1.1
|
|
interface=wlp6s0
|
|
log_target=192.168.1.5:5140 # optional
|
|
|
|
[hostname-1]
|
|
ip=192.168.1.82 # optional
|
|
services=ssh,smb # optional; falls back to --randomize-services
|
|
|
|
[hostname-1.ssh] # optional per-service persona config
|
|
kernel_version=5.15.0-76-generic
|
|
users=root:toor,admin:admin123
|
|
|
|
[hostname-1.http]
|
|
server_header=nginx/1.18.0
|
|
fake_app=wordpress
|
|
|
|
[hostname-2]
|
|
services=ssh
|
|
|
|
[hostname-3]
|
|
ip=192.168.1.32
|
|
|
|
# Custom (bring-your-own) service definitions:
|
|
[custom-myservice]
|
|
binary=my-docker-image:latest
|
|
exec=/usr/bin/myservice -p 8080
|
|
ports=8080
|
|
|
|
"""
|
|
|
|
import configparser
|
|
from dataclasses import dataclass, field
|
|
from pathlib import Path
|
|
|
|
|
|
@dataclass
|
|
class DeckySpec:
|
|
name: str
|
|
ip: str | None = None
|
|
services: list[str] | None = None
|
|
service_config: dict[str, dict] = field(default_factory=dict)
|
|
|
|
|
|
@dataclass
|
|
class CustomServiceSpec:
|
|
"""Spec for a user-defined (bring-your-own) service."""
|
|
name: str # service slug, e.g. "myservice" (section is "custom-myservice")
|
|
image: str # Docker image to use
|
|
exec_cmd: str # command to run inside the container
|
|
ports: list[int] = field(default_factory=list)
|
|
|
|
|
|
@dataclass
|
|
class IniConfig:
|
|
subnet: str | None = None
|
|
gateway: str | None = None
|
|
interface: str | None = None
|
|
log_target: str | None = None
|
|
deckies: list[DeckySpec] = field(default_factory=list)
|
|
custom_services: list[CustomServiceSpec] = field(default_factory=list)
|
|
|
|
|
|
def load_ini(path: str | Path) -> IniConfig:
|
|
"""Parse a DECNET INI file and return an IniConfig."""
|
|
cp = configparser.ConfigParser()
|
|
read = cp.read(str(path))
|
|
if not read:
|
|
raise FileNotFoundError(f"Config file not found: {path}")
|
|
|
|
cfg = IniConfig()
|
|
|
|
if cp.has_section("general"):
|
|
g = cp["general"]
|
|
cfg.subnet = g.get("net")
|
|
cfg.gateway = g.get("gw")
|
|
cfg.interface = g.get("interface")
|
|
cfg.log_target = g.get("log_target") or g.get("log-target")
|
|
|
|
# First pass: collect decky sections and custom service definitions
|
|
for section in cp.sections():
|
|
if section == "general":
|
|
continue
|
|
if "." in section:
|
|
continue # subsections handled in second pass
|
|
if section.startswith("custom-"):
|
|
# Bring-your-own service definition
|
|
s = cp[section]
|
|
svc_name = section[len("custom-"):]
|
|
image = s.get("binary", "")
|
|
exec_cmd = s.get("exec", "")
|
|
ports_raw = s.get("ports", "")
|
|
ports = [int(p.strip()) for p in ports_raw.split(",") if p.strip().isdigit()]
|
|
cfg.custom_services.append(
|
|
CustomServiceSpec(name=svc_name, image=image, exec_cmd=exec_cmd, ports=ports)
|
|
)
|
|
continue
|
|
s = cp[section]
|
|
ip = s.get("ip")
|
|
svc_raw = s.get("services")
|
|
services = [sv.strip() for sv in svc_raw.split(",")] if svc_raw else None
|
|
cfg.deckies.append(DeckySpec(name=section, ip=ip, services=services))
|
|
|
|
# Second pass: collect per-service subsections [decky-name.service]
|
|
decky_names = {d.name for d in cfg.deckies}
|
|
decky_map = {d.name: d for d in cfg.deckies}
|
|
for section in cp.sections():
|
|
if "." not in section:
|
|
continue
|
|
decky_name, _, svc_name = section.partition(".")
|
|
if decky_name not in decky_names:
|
|
continue # orphaned subsection — ignore
|
|
svc_cfg = {k: v for k, v in cp[section].items()}
|
|
decky_map[decky_name].service_config[svc_name] = svc_cfg
|
|
|
|
return cfg
|