diff options
author | dev0 <matzeton@googlemail.com> | 2018-07-18 16:45:19 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2018-07-18 16:45:19 +0200 |
commit | c19cb7e39a80fab15429da599d7b8c85224fde96 (patch) | |
tree | 498aba524c4f14bdce9cbc191df40a4f185e17b6 | |
parent | 19ed053b10033613556b79f06bd128c9e87268a2 (diff) |
Create README.md
-rw-r--r-- | README.md | 58 |
1 files changed, 58 insertions, 0 deletions
diff --git a/README.md b/README.md new file mode 100644 index 0000000..678d124 --- /dev/null +++ b/README.md @@ -0,0 +1,58 @@ +[](https://travis-ci.org/lnslbrty/potd) +[](https://scan.coverity.com/projects/16232) +[](https://www.codacy.com/app/lnslbrty/potd?utm_source=github.com&utm_medium=referral&utm_content=lnslbrty/potd&utm_campaign=Badge_Grade) +[](https://github.com/lnslbrty/potd/issues) +[](https://github.com/lnslbrty/potd/blob/master/COPYING) +[](https://gitter.im/potd/Lobby) + +# honey[potd]aemon + +This project is part of a BA thesis. It is currently in a pre-alpha state. + +## Dependencies + +Kernel/libc requirements: Cgroups, Namespaces (UTS, IPC, PID, NET, CGROUPS) + +Required: libssh, pthread +Optional: libseccomp + +A chroot'able directory that contains an executable named '/bin/sh'. + +## HowTo + +Build: + - `./autogen.sh` + - `./configure` + - `make` + +Run: + - `./src/potd --redirect 0.0.0.0:2222:127.0.0.1:22222 + --protocol 127.0.0.1:22222:127.0.0.1:33333 + --jail 127.0.0.1:33333` + + This will process, filter and redirect all traffic incoming from 0.0.0.0:2222 to the + protocol handler at 127.0.0.1:22222 and if the protocol accepts it, it will forward + all traffic to the jail/sandbox at 127.0.0.1:33333. + (clunky atm, will be simplified in the future) + - see `./src/potd --help` + +## Features + +The server supports currently only shell channels but exec and direct-tcp channels are coming soon! + +Supported protocols (at the moment): + - ssh with libssh + +Protocols to implement: + - HTTP + - ssh with openssh + - SCADA + +Suits perfect for your favoured Desktop/Server/OpenWrt Linux system. + +## TODOs + +- RESTful listener for output sampled data from different processes + (send (real-time)statistics about protocols/jails/etc to higher level apps) +- ptrace support for jailed processes (trace syscalls) +- improved event handling (maybe libevent?) |