-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.yml
77 lines (57 loc) · 1.97 KB
/
main.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
---
honeyd_enabled: yes
# Turns off the role completely
# TODO rename this as we have the zip archive
honeyd_repo: 'https://codeload.github.com/DataSoft/Honeyd/zip/master'
# Where honeyd will be downloaded from
honeyd_provos_repo: 'https://codeload.github.com/provos/honeyd/zip/master'
# For the original service scripts
honeyd_provos_scripts: yes
# Enables installing original service scripts
honeyd_user: nobody
# The user honeyd will run as
honeyd_group: nogroup
# The group honeyd will run as
honeyd_interface: ens4
# The interface honeyd will listen on
honeyd_network: 10.0.0.0/8
# Packets destined to this subnet will be captured by honeyd
honeyd_use_current_nmap_os_db: yes
# Update the OS db
honeyd_use_current_nmap_mac_prefixes: yes
# Update MAC prefixes
honeyd_os_db_url: https://raw.githubusercontent.com/nmap/nmap/master/nmap-os-db
# Where to download a current nmap-os-db file from
honeyd_mac_prefixes_url: https://raw.githubusercontent.com/nmap/nmap/master/nmap-mac-prefixes
# Where to download a current nmap-mac-prefixes file from
honeyd_force_db_update_check: no
# If yes, it will cause ansible to check for updates in the OS/MAC databases
honeyd_packet_log: yes
# Enables packet logging
honeyd_service_log: yes
# Enables service logging
honeyd_dhcp_log: yes
# Enables DHCP logging
honeyd_custom_scripts: []
honeyd_split_config: yes
# Split configuration into one file per defined honeypot
honeyd_use_config: ''
# A local file to upload and integrate with the rest of the configuration
# Example of how honeypots are defined. All the supported options are shown.
honeyd_honeypots:
routerone:
personality: Cisco 2811 router (IOS 15.1)
tcp:
default: reset
23: script=original/router-telnet.pl
bind: 10.100.0.1
# manufacturer: cisco
# dhcp: eth0
netbsd:
personality: Linux 2.6.27 (Ubuntu 8.10)
tcp:
default: reset
22: proxy=\$ipsrc:22
80: script=original/web.sh
22022: script=linux/ssh.sh
bind: 10.100.0.134