diff --git a/Packer/scripts/vm-guest-tools.bat b/Packer/scripts/vm-guest-tools.bat index a051244..e4fb851 100755 --- a/Packer/scripts/vm-guest-tools.bat +++ b/Packer/scripts/vm-guest-tools.bat @@ -17,7 +17,7 @@ if exist "C:\Users\vagrant\windows.iso" ( ) if not exist "C:\Windows\Temp\windows.iso" ( - powershell -Command "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12; (New-Object System.Net.WebClient).DownloadFile('https://softwareupdate.vmware.com/cds/vmw-desktop/ws/15.5.0/14665864/windows/packages/tools-windows.tar', 'C:\Windows\Temp\vmware-tools.tar')" /opt/splunk/etc/users/admin/user-prefs/local/user-prefs.conf - # Disable the instrumentation popup - echo -e "showOptInModal = 0\noptInVersionAcknowledged = 4" >>/opt/splunk/etc/apps/splunk_instrumentation/local/telemetry.conf # Enable SSL Login for Splunk echo -e "[settings]\nenableSplunkWebSSL = true" >/opt/splunk/etc/system/local/web.conf # Copy over the Logger Dashboard @@ -186,8 +199,6 @@ display.page.home.dashboardId = /servicesNS/nobody/search/data/ui/views/logger_d # Reboot Splunk to make changes take effect /opt/splunk/bin/splunk restart /opt/splunk/bin/splunk enable boot-start - # Generate the ASN lookup table - /opt/splunk/bin/splunk search "|asngen | outputlookup asn" -auth 'admin:changeme' fi } @@ -267,7 +278,7 @@ install_zeek() { SPLUNK_SURICATA_SOURCETYPE='json_suricata' sh -c "echo 'deb http://download.opensuse.org/repositories/security:/zeek/xUbuntu_18.04/ /' > /etc/apt/sources.list.d/security:zeek.list" wget -nv https://download.opensuse.org/repositories/security:zeek/xUbuntu_18.04/Release.key -O /tmp/Release.key - apt-key add - /dev/null # Update APT repositories apt-get -qq -ym update # Install tools to build and configure Zeek @@ -403,7 +414,7 @@ install_guacamole() { cd /opt apt-get -qq install -y libcairo2-dev libjpeg62-dev libpng-dev libossp-uuid-dev libfreerdp-dev libpango1.0-dev libssh2-1-dev libssh-dev tomcat8 tomcat8-admin tomcat8-user wget --progress=bar:force "http://apache.org/dyn/closer.cgi?action=download&filename=guacamole/1.0.0/source/guacamole-server-1.0.0.tar.gz" -O guacamole-server-1.0.0.tar.gz - tar -xvf guacamole-server-1.0.0.tar.gz && cd guacamole-server-1.0.0 + tar -xf guacamole-server-1.0.0.tar.gz && cd guacamole-server-1.0.0 ./configure &>/dev/null && make --quiet &>/dev/null && make --quiet install &>/dev/null || echo "[-] An error occurred while installing Guacamole." ldconfig cd /var/lib/tomcat8/webapps @@ -425,7 +436,7 @@ postinstall_tasks() { # Include Splunk and Zeek in the PATH echo export PATH="$PATH:/opt/splunk/bin:/opt/zeek/bin" >>~/.bashrc # Ping DetectionLab server for usage statistics - curl -A "DetectionLab-logger" "https://detectionlab.network/logger" + curl -s -A "DetectionLab-logger" "https://detectionlab.network/logger" } main() { diff --git a/Vagrant/resources/splunk_server/asn-lookup-generator_101.tgz b/Vagrant/resources/splunk_server/asn-lookup-generator_101.tgz deleted file mode 100644 index 2666156..0000000 Binary files a/Vagrant/resources/splunk_server/asn-lookup-generator_101.tgz and /dev/null differ diff --git a/Vagrant/resources/splunk_server/asn-lookup-generator_110.tgz b/Vagrant/resources/splunk_server/asn-lookup-generator_110.tgz new file mode 100644 index 0000000..03862ba Binary files /dev/null and b/Vagrant/resources/splunk_server/asn-lookup-generator_110.tgz differ diff --git a/ci/manual_machine_bootstrap.sh b/ci/manual_machine_bootstrap.sh index 2e00ac9..2f3d036 100644 --- a/ci/manual_machine_bootstrap.sh +++ b/ci/manual_machine_bootstrap.sh @@ -22,8 +22,8 @@ git clone https://github.com/clong/DetectionLab.git /opt/DetectionLab # Install Vagrant mkdir /opt/vagrant cd /opt/vagrant || exit 1 -wget https://releases.hashicorp.com/vagrant/2.2.6/vagrant_2.2.6_x86_64.deb -dpkg -i vagrant_2.2.6_x86_64.deb +wget https://releases.hashicorp.com/vagrant/2.2.7/vagrant_2.2.7_x86_64.deb +dpkg -i vagrant_2.2.7_x86_64.deb # Disable IPv6 - may help with the vagrant-reload plugin: https://github.com/hashicorp/vagrant/issues/8795#issuecomment-468945063 echo "net.ipv6.conf.all.disable_ipv6=1" >> /etc/sysctl.conf diff --git a/ci/manual_machine_bootstrap_vmware.sh b/ci/manual_machine_bootstrap_vmware.sh index 7e188ea..8ba17e2 100644 --- a/ci/manual_machine_bootstrap_vmware.sh +++ b/ci/manual_machine_bootstrap_vmware.sh @@ -2,6 +2,12 @@ # This script is used to manually prepare an Ubuntu 16.04 server for DetectionLab building + # eth1: + # dhcp4: true + # gateway4: 192.168.76.1 + # nameservers: + # addresses: [8.8.8.8,8.8.4.4] + export DEBIAN_FRONTEND=noninteractive export SERIALNUMBER="SECRET" export LICENSEFILE="SECRET" @@ -14,9 +20,9 @@ apt-get install -y linux-headers-"$(uname -r)" build-essential unzip git ufw apa pip install awscli --upgrade --user cp /root/.local/bin/aws /usr/local/bin/aws && chmod +x /usr/local/bin/aws -wget -O VMware-Workstation-Full-15.5.1-15018445.x86_64.bundle "https://download3.vmware.com/software/wkst/file/VMware-Workstation-Full-15.5.1-15018445.x86_64.bundle" -chmod +x VMware-Workstation-Full-15.5.1-15018445.x86_64.bundle -sudo sh VMware-Workstation-Full-15.5.1-15018445.x86_64.bundle --console --required --eulas-agreed --set-setting vmware-workstation serialNumber $SERIALNUMBER +wget -O VMware-Workstation-Full-15.5.2-15785246.x86_64.bundle "https://download3.vmware.com/software/wkst/file/VMware-Workstation-Full-15.5.2-15785246.x86_64.bundle" +chmod +x VMware-Workstation-Full-15.5.2-15785246.x86_64.bundle +sudo sh VMware-Workstation-Full-15.5.2-15785246.x86_64.bundle --console --required --eulas-agreed --set-setting vmware-workstation serialNumber $SERIALNUMBER # Set up firewall ufw allow ssh @@ -28,8 +34,8 @@ git clone https://github.com/clong/DetectionLab.git /opt/DetectionLab # Install Vagrant mkdir /opt/vagrant cd /opt/vagrant || exit 1 -wget --progress=bar:force https://releases.hashicorp.com/vagrant/2.2.6/vagrant_2.2.6_x86_64.deb -dpkg -i vagrant_2.2.6_x86_64.deb +wget --progress=bar:force https://releases.hashicorp.com/vagrant/2.2.7/vagrant_2.2.7_x86_64.deb +dpkg -i vagrant_2.2.7_x86_64.deb # Disable IPv6 - may help with the vagrant-reload plugin: https://github.com/hashicorp/vagrant/issues/8795#issuecomment-468945063 echo "net.ipv6.conf.all.disable_ipv6=1" >> /etc/sysctl.conf sysctl -p /etc/sysctl.conf > /dev/null