lmco/laikaboss

How do you send network data via networked instance?

Opened this issue · 6 comments

Do you use it as a proxy and send the data via http proxy over certain port? I don't really get how to use it as networked instance. (And would love to try it out.)
Thanks.

@kurtcoke cloudscan.py provides an example implementation for how to use the client library that is included in the framework.

We plan to release a couple of additional clients (besides cloudscan) in the near future including a milter server that can be integrated with a mail relay, and an ICAP server that can be integrated with a proxy server. These will obviously make laikaboss more immediately useful. If you write a laikaboss client for any other system (like a passive NIDS) please feel free to share it back.

Cool I don't really get how to use it yet. Where can I get the docs from the blackhat workshop on Laikaboss? Thanks.

@kurtcoke what is your email? I don't have write permission to this repo so I can't attach the pdf

also, the slides don't really explain how to invoke it, so I can explain here!

  1. open two different terminals of your laikaboss directory
  2. use one to run "laikad.py". This is your server
  3. Use cloudscan.py as your client, and then invoke it as you would invoke laika.py

@cfossace I get that part I just dont get how you can run it as a proxy and have all your traffic pass through it? Does that make sense?