Trapster Community
Trapster Community is a low-interaction honeypot designed to be deployed on internal networks. It is built to monitor and detect suspicious activities, providing a deceptive layer to network security.
Visit the Trapster website to learn more about our commercial product, which includes advanced features like pre-configured hardened OS, automatic deployment, webhook, and SIEM integration.
Features
- Deceptive Security: Mimics network services to lure and detect potential intruders.
- Asynchronous Framework: Utilizes Python's
asynciofor efficient, non-blocking operations. - Configuration Management: Easily configurable through
trapster.conf. - Expandable Services: Add and configure as many services as needed with minimal effort.
Installation
To install Trapster, clone the repository and use setup.py to install the dependencies:
git clone https://github.com/0xBallpoint/trapster-community/
cd trapster
python -m venv venv
source ./venv/bin/activate
python setup.py install
Usage
Configuration
Trapster uses a configuration file located at data/trapster.conf. Ensure the configuration file is correctly set up before running the daemon.
You can add as many services as you want, even mutliple services of the same type.
You should also change the interface name, Trapster uses that to discover the IP address it should bind to. On linux, you can type ifconfig or ip a.
Running the Daemon
After installation, to start the Trapster daemon, simply use the trapster command inside your folder:
trapster
In development mode, you can use the main script:
python3 main.py
Log format
Each module can generates up to four types of logs: connection, data, login, and query.
connection: Indicates that a connection has been made to the module.data: Represents raw data that has been sent, logged in HEX format. This data is unprocessed.login: Captures login attempts to the module. The data field is in JSON format and contains processed information.query: Logs data that has been processed and does not correspond to an authentication attempt. The data field is in JSON format and contains processed information.
Contributing
Contributions are welcome! Please follow these steps:
- Fork the repository.
- Create a new branch (git checkout -b feature-branch).
- Make your changes.
- Commit your changes (git commit -m 'Add new feature').
- Push to the branch (git push origin feature-branch).
- Create a pull request.
License
Trapster is licensed under the GNU Affero General Public License v3 or later (AGPLv3+). See the LICENSE file for more details.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file trapster-1.0.12.tar.gz.
File metadata
- Download URL: trapster-1.0.12.tar.gz
- Upload date:
- Size: 145.4 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/5.1.0 CPython/3.12.5
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a4ffb07abd8892d1b4795c6f9e4ae363f9b69b758688791577d771c991b789b4
|
|
| MD5 |
b3de50e27c5371aa31cf41dd3f72fbba
|
|
| BLAKE2b-256 |
ab2c5d9b4e716213dd0cc924e8a3d791fda6271ea2f270ba1c541717bd790b65
|
File details
Details for the file trapster-1.0.12-py3-none-any.whl.
File metadata
- Download URL: trapster-1.0.12-py3-none-any.whl
- Upload date:
- Size: 150.2 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/5.1.0 CPython/3.12.5
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
62342a04d868bf9fe091258c67e83111a1199ecb005eda035b74641639fd172f
|
|
| MD5 |
93361ab26fb478dcad6026aca061899e
|
|
| BLAKE2b-256 |
762978fea2c38a9017ba9d742dabfb42b549b7b389c44ce632a0dc7ea1a51659
|
