/honeyalarmg2

Simplified UI for showing honeypot alarms

Primary LanguageGroovyApache License 2.0Apache-2.0

honeyalarmg2

IN DEVELOPMENT

Simplified UI for showing honeypot alarms for the DTAG early warning system (https://www.sicherheitstacho.eu)

Based on

Functions

  • collect alarms from your local honeypot installations
  • review current alarms
  • forward alarms to DTAG early warning system
  • use role / security functions from Spring security Login username / password combination is (me/password)

see history.txt and todo.txt for details

Configfile (/etc/honeyalarmg2.properties)

  • useTwitter=no
  • twitterOAuthConsumerKey=X
  • twitterOAuthConsumerSecret=A
  • twitterOAuthAccessToken=Y
  • twitterOAuthAccessTokenSecret=Y
  • useSicherheitstacho=no
  • userNameTSecRadar=community-01-user
  • passwordTSecRadar=foth{a5maiCee8fineu7
  • serverTSecRadar=https://community.sicherheitstacho.eu/ews-0.1/alert/postSimpleMessage
  • usePushover=no
  • pushOverAppToken=111
  • pushOverDeviceID=222
  • pushOverUserToken=333
  • useSlack
  • slackIncomingWebHooks

Note: If you use e.g. an nginx server in front of the grails application, please make sure, that the remote address is passed through

location / { proxy_pass http://localhost:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $remote_addr; }

Thanks to

  • Andrea De Pasquale for test/debug help (Telegram)
  • Marco Ochse for Debugging
  • Andre Vorbach for some ideas
  • Rainer Schmidt for some suggestions

Some code examples taken from

https://forum.jquery.com/topic/refresh-div-tag-without-refresing-the-whole-page http://spring.io/blog/2010/08/11/simplified-spring-security-with-grails/