Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docker Ip address logging issue #479

Open
aguacero7 opened this issue Jul 30, 2024 · 0 comments
Open

Docker Ip address logging issue #479

aguacero7 opened this issue Jul 30, 2024 · 0 comments

Comments

@aguacero7
Copy link

I had in mind to use PyRDP as a High interaction Honeypot. Running the app with docker, i realized that no matter the Source IP, the logged IP is always the docker NATted ip (172.17.0.1). I would like to keep the source IP address to log it, may it be poissible with a docker network or with some modifications ?

docker run -p 10.10.0.163:3389:3389 --network bridge --user root gosecure/pyrdp:devel-slim pyrdp-mitm 10.10.0.175:3000
[2024-07-30 08:24:52,859] - INFO - GLOBAL - pyrdp.mitm - Target: 10.10.0.175:3000
[2024-07-30 08:24:52,859] - INFO - GLOBAL - pyrdp.mitm - Output directory: /home/pyrdp/pyrdp_output
[2024-07-30 08:24:52,861] - INFO - GLOBAL - pyrdp.mitm.connections - MITM Server listening on 0.0.0.0:3389
[2024-07-30 08:26:13,034] - INFO - romantic_aryabhata_5364781 - pyrdp.mitm.connections.tcp - New client connected from 172.17.0.1:58294

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant