e93bcb959a
* added documentation, updated repo pointer in the dashboard, added dashboard link highlighting and mionor fixes * added doc * added logo to dashboard * Fixed dashboard attack chart * Enhance fake data generation with varied request counts for better visualization * Add automatic migrations and support for latitude/longitude in IP stats * Update Helm chart version to 0.2.2 and add timezone configuration option --------- Co-authored-by: BlessedRebuS <patrick.difa@gmail.com>
142 lines
4.3 KiB
Python
142 lines
4.3 KiB
Python
#!/usr/bin/env python3
|
|
|
|
"""
|
|
Main server module for the deception honeypot.
|
|
Run this file to start the server.
|
|
"""
|
|
|
|
import sys
|
|
from http.server import HTTPServer
|
|
|
|
from config import get_config
|
|
from tracker import AccessTracker
|
|
from analyzer import Analyzer
|
|
from handler import Handler
|
|
from logger import (
|
|
initialize_logging,
|
|
get_app_logger,
|
|
get_access_logger,
|
|
get_credential_logger,
|
|
)
|
|
from database import initialize_database
|
|
from tasks_master import get_tasksmaster
|
|
|
|
|
|
def print_usage():
|
|
"""Print usage information"""
|
|
print(f"Usage: {sys.argv[0]} [FILE]\n")
|
|
print("FILE is file containing a list of webpage names to serve, one per line.")
|
|
print("If no file is provided, random links will be generated.\n")
|
|
print("Configuration:")
|
|
print(" Configuration is loaded from a YAML file (default: config.yaml)")
|
|
print("Set CONFIG_LOCATION environment variable to use a different file.\n")
|
|
print("Example config.yaml structure:")
|
|
print("server:")
|
|
print("port: 5000")
|
|
print("delay: 100")
|
|
print("links:")
|
|
print("min_length: 5")
|
|
print("max_length: 15")
|
|
print("min_per_page: 10")
|
|
print("max_per_page: 15")
|
|
print("canary:")
|
|
print("token_url: null")
|
|
print("token_tries: 10")
|
|
print("dashboard:")
|
|
print("secret_path: null # auto-generated if not set")
|
|
print("database:")
|
|
print('path: "data/krawl.db"')
|
|
print("retention_days: 30")
|
|
print("behavior:")
|
|
print("probability_error_codes: 0")
|
|
|
|
|
|
def main():
|
|
"""Main entry point for the deception server"""
|
|
if "-h" in sys.argv or "--help" in sys.argv:
|
|
print_usage()
|
|
exit(0)
|
|
|
|
config = get_config()
|
|
|
|
# Initialize logging with timezone
|
|
initialize_logging()
|
|
app_logger = get_app_logger()
|
|
access_logger = get_access_logger()
|
|
credential_logger = get_credential_logger()
|
|
|
|
# Initialize database for persistent storage
|
|
try:
|
|
initialize_database(config.database_path)
|
|
app_logger.info(f"Database initialized at: {config.database_path}")
|
|
except Exception as e:
|
|
app_logger.warning(
|
|
f"Database initialization failed: {e}. Continuing with in-memory only."
|
|
)
|
|
|
|
tracker = AccessTracker(config.max_pages_limit, config.ban_duration_seconds)
|
|
analyzer = Analyzer()
|
|
|
|
Handler.config = config
|
|
Handler.tracker = tracker
|
|
Handler.analyzer = analyzer
|
|
Handler.counter = config.canary_token_tries
|
|
Handler.app_logger = app_logger
|
|
Handler.access_logger = access_logger
|
|
Handler.credential_logger = credential_logger
|
|
|
|
if len(sys.argv) == 2:
|
|
try:
|
|
with open(sys.argv[1], "r") as f:
|
|
Handler.webpages = f.readlines()
|
|
|
|
if not Handler.webpages:
|
|
app_logger.warning(
|
|
"The file provided was empty. Using randomly generated links."
|
|
)
|
|
Handler.webpages = None
|
|
except IOError:
|
|
app_logger.warning("Can't read input file. Using randomly generated links.")
|
|
|
|
# tasks master init
|
|
tasks_master = get_tasksmaster()
|
|
tasks_master.run_scheduled_tasks()
|
|
|
|
try:
|
|
|
|
banner = f"""
|
|
|
|
============================================================
|
|
DASHBOARD AVAILABLE AT
|
|
{config.dashboard_secret_path}
|
|
============================================================
|
|
"""
|
|
app_logger.info(banner)
|
|
app_logger.info(f"Starting deception server on port {config.port}...")
|
|
if config.canary_token_url:
|
|
app_logger.info(
|
|
f"Canary token will appear after {config.canary_token_tries} tries"
|
|
)
|
|
else:
|
|
app_logger.info(
|
|
"No canary token configured (set CANARY_TOKEN_URL to enable)"
|
|
)
|
|
|
|
server = HTTPServer(("0.0.0.0", config.port), Handler)
|
|
app_logger.info("Server started. Use <Ctrl-C> to stop.")
|
|
server.serve_forever()
|
|
except KeyboardInterrupt:
|
|
app_logger.info("Stopping server...")
|
|
server.socket.close()
|
|
app_logger.info("Server stopped")
|
|
except Exception as e:
|
|
app_logger.error(f"Error starting HTTP server on port {config.port}: {e}")
|
|
app_logger.error(
|
|
f"Make sure you are root, if needed, and that port {config.port} is open."
|
|
)
|
|
exit(1)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|