BinaryDefense / log4j-honeypot-flask

Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228
148 stars 24 forks source link

Teams Webhooks #7

Closed retreif closed 2 years ago

retreif commented 2 years ago

How much testing did you do with Teams webhooks? I wasn't able to run the honeypot in Docker with the Teams string and even setting the environmental variables and just running the app it doesn't seem to work. My skill level with Docker and Linux in general is novice. If this is the wrong place for this I apologize in advance.

4Nzic-fiddler commented 2 years ago

I only ran one test for Teams and since then I’ve been running it in production with Mattermost. However, the code and message format is exactly the same so it should work. I can help you test to see what is wrong if you like.

On Tue, Dec 21, 2021 at 1:37 PM retreif @.***> wrote:

How much testing did you do with Teams webhooks? I wasn't able to run the honeypot in Docker with the Teams string and even setting the environmental variables and just running the app it doesn't seem to work. My skill level with Docker and Linux in general is novice. If this is the wrong place for this I apologize in advance.

— Reply to this email directly, view it on GitHub https://github.com/BinaryDefense/log4j-honeypot-flask/issues/7, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACP4355BPJMQOABXY5IVNOTUSDXS3ANCNFSM5KRD6MXA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you are subscribed to this thread.Message ID: @.***>

retreif commented 2 years ago

I moved all the config into the script and have it working. I'll work my way back through to see what I was doing wrong.

4Nzic-fiddler commented 2 years ago

Oh good! Glad you have it working now. It must be something about the environment variables misspelled or not getting set.

On Wed, Dec 22, 2021 at 9:04 AM retreif @.***> wrote:

I moved all the config into the script and have it working. I'll work my way back through to see what I was doing wrong.

— Reply to this email directly, view it on GitHub https://github.com/BinaryDefense/log4j-honeypot-flask/issues/7#issuecomment-999731130, or unsubscribe https://github.com/notifications/unsubscribe-auth/ACP435YGKV5INCLQCBYTE7TUSIALHANCNFSM5KRD6MXA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you commented.Message ID: @.***>

4Nzic-fiddler commented 2 years ago

Not an issue with the code