RolphH’s gists

RolphH / ipxe-blog.txt

Last active December 28, 2021 12:48

	#!ipxe
	set net0/ip $ipaddress
	set net0/netmask $subnetmask
	set net0/gateway $gateway
	set dns $dns ifopen net0
	chain –autofree https://boot.netboot.xyz

RolphH / ipaddress-layout-blog.csv

Created December 28, 2021 12:44

RolphH / honeypot-logstash.conf

Created February 16, 2021 16:28

Additional logstash config for T-Pot Logstash service

	if [type] == "ConPot" and [dest_port] and [event_type] == "NEW_CONNECTION" and [src_ip] != "${MY_INTIP}" {
	http {
	url => "http://${HTTP_LOGIP}"
	http_method => "post"
	mapping => {
	"type" => "%{type}"
	"protocol" => "Elastic"
	"source" => "%{src_ip}"
	"dest_port" => "%{dest_port}"
	"geoip" => "%{geoip}"

RolphH / honey-map.js

Created February 16, 2021 16:27

Javascript which opens websocket and plots the geopoints on Mapbox map

	// Set the IP to your webserver IP
	const WEBSOCKET_SERVER = 'ws://<YOUR_WEBSERVERIP:8081>';
	// Set your mapboxGL AccessToken
	const MAPBOX_TOKEN = 'YOUR_ACCESS_TOKEN';

	// Remove points from map after x-seconds
	var displayTime = 300;

	// Set some defaults for the map

RolphH / honeypot-index.html

Created February 16, 2021 16:25

HTML File to show mapgl map

	<!DOCTYPE HTML>
	<html>
	<head>
	<link href="https://cdn.jsdelivr.net/npm/[email protected]/dist/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-giJF6kkoqNQ00vy+HMDP7azOuL0xtbfIcaT9wjKHr8RbDVddVHyTfAAsrekwKmP1" crossorigin="anonymous">
	<script src='https://api.mapbox.com/mapbox-gl-js/v2.0.1/mapbox-gl.js'></script>
	<link href='https://api.mapbox.com/mapbox-gl-js/v2.0.1/mapbox-gl.css' rel='stylesheet' />
	<style>
	@import url(https://fonts.googleapis.com/css?family=Inconsolata:400,500);

	body { background-color: black }

RolphH / server.js

Created February 16, 2021 16:21

Small node.js application with websocket

	#!/usr/bin/env nodejs
	const http = require('http');
	const WebSocket = require('ws');
	const express = require('express');
	const app = express();

	const PORT = 8080;
	const WS_PORT = 8081;

	app.use(express.json());