https://github.com/schmalle/medpot

HL7 / FHIR honeypot
https://github.com/schmalle/medpot

golang honeypot

Last synced: 6 days ago
JSON representation

HL7 / FHIR honeypot

• Host: GitHub
• URL: https://github.com/schmalle/medpot
• Owner: schmalle
• Created: 2018-07-15T06:35:17.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2023-07-06T19:40:26.000Z (over 1 year ago)
• Last Synced: 2024-04-15T10:39:52.206Z (7 months ago)
• Topics: golang, honeypot
• Language: Go
• Homepage: https://dtag-dev-sec.github.io
• Size: 91.8 KB
• Stars: 20
• Watchers: 4
• Forks: 4
• Open Issues: 2
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-honeypots - medpot - HL7 / FHIR honeypot. (Honeypots)
• fucking-awesome-honeypots - medpot - HL7 / FHIR honeypot. (Honeypots)

README

        
# medpot

Is a honeypot that tries to emulate HL7 / FHIR honeypot

## Installation

Requires go 1.17 or newer

1. Installation of dependencies can be handled by running `bash scripts/dependencies.sh`

2. Now you can either do


    a) `bash scripts/run_medpot.sh` or `go run go/*.go` - To run the files


    b) `bash scripts/compile_medpot.sh` or  `go build -o medpot go/*.go` - To compile the files into a binary


    c) `make` and `make install` to create a copy on disk and also create all necessary files


    d) `bash scripts/compile_docker.sh` to create a docker container

3. You're done now! My suggestion is to check the arguments that you can send in to the program

By default the honeypot will try to bind and listen on port `2575`

## Arguments

Medpot utilizes an arugment parser to be able to less static in some areas, the supported arguments at this point of time are.


```

#### Definied Arguments ####

--set_logo, -sl   | Allows you to pick a logo that is shown on boot, options are = 1, 2

--set_port, -sp   | Allows for a different port to be used, default = 2575

--set_log_location, -sll   | Changes the directory where the logs will be placed, default = '/var/log/medpot/'

```

All arguments can easily be checked by passing the `-h` flag.

## Templates, configuration & Logs

Templates and configurations are located at `/etc/medpot/`

The default location for log files are located at `/var/log/medpot.log` but this can be changed by sending the `-sll` flag followed by the new location

Example

```

{

    "level":"info",

    "message":"Connection found",

    "time":"2018.09.09 17:20:49",

    "port":"57905",

    "ip":"127.0.0.1",

    "data":"TVMpEUk98S0FURV5TTUlUSF5FEK"

}

```