diff --git a/ESXi/ansible/roles/logger/tasks/main.yml b/ESXi/ansible/roles/logger/tasks/main.yml index bab730f..e141330 100644 --- a/ESXi/ansible/roles/logger/tasks/main.yml +++ b/ESXi/ansible/roles/logger/tasks/main.yml @@ -410,6 +410,18 @@ else echo "[$(date +%H:%M:%S)]: Failed to download the latest version of Velociraptor. Please open a DetectionLab issue on Github." fi + cd /opt/velociraptor || exit 1 + mv velociraptor-*-linux-amd64 velociraptor + chmod +x velociraptor + cp /vagrant/resources/velociraptor/server.config.yaml /opt/velociraptor + echo "[$(date +%H:%M:%S)]: Creating Velociraptor dpkg..." + ./velociraptor --config /opt/velociraptor/server.config.yaml debian server + echo "[$(date +%H:%M:%S)]: Installing the dpkg..." + if dpkg -i velociraptor_*_server.deb >/dev/null; then + echo "[$(date +%H:%M:%S)]: Installation complete!" + else + echo "[$(date +%H:%M:%S)]: Failed to install the dpkg" + fi cd /opt/velociraptor || exit 1 mv velociraptor-*-linux-amd64 velociraptor diff --git a/Vagrant/bootstrap.sh b/Vagrant/bootstrap.sh index a9ce3ec..96efbb9 100644 --- a/Vagrant/bootstrap.sh +++ b/Vagrant/bootstrap.sh @@ -266,7 +266,7 @@ install_fleet_import_osquery_config() { echo "[$(date +%H:%M:%S)]: Waiting for fleet service to start..." while true; do - result=$(curl --silent -k https://192.168.38.105:8412) + result=$(curl --silent -k https://127.0.0.1:8412) if echo "$result" | grep -q setup; then break; fi sleep 1 done @@ -391,12 +391,14 @@ install_zeek() { install_velociraptor() { echo "[$(date +%H:%M:%S)]: Installing Velociraptor..." - mkdir /opt/install_velociraptor + if [ ! -d "/opt/velociraptor" ]; then + mkdir /opt/velociraptor + fi echo "[$(date +%H:%M:%S)]: Attempting to determine the URL for the latest release of Velociraptor" LATEST_VELOCIRAPTOR_LINUX_URL=$(curl -sL https://github.com/Velocidex/velociraptor/releases/latest | grep 'linux-amd64' | grep -Eo "/(?[^\"]+)" | grep amd | sed 's#^#https://github.com#g') echo "[$(date +%H:%M:%S)]: The URL for the latest release was extracted as $LATEST_VELOCIRAPTOR_LINUX_URL" echo "[$(date +%H:%M:%S)]: Attempting to download..." - wget -P --progress=bar:force /opt/velociraptor "$LATEST_VELOCIRAPTOR_LINUX_URL" + wget -P /opt/velociraptor --progress=bar:force "$LATEST_VELOCIRAPTOR_LINUX_URL" if [ "$(file /opt/velociraptor/velociraptor*linux-amd64 | grep -c 'ELF 64-bit LSB executable')" -eq 1 ]; then echo "[$(date +%H:%M:%S)]: Velociraptor successfully downloaded!" else