Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How do you send network data via networked instance? #18

Open
kurtcoke opened this issue Oct 5, 2015 · 6 comments
Open

How do you send network data via networked instance? #18

kurtcoke opened this issue Oct 5, 2015 · 6 comments

Comments

@kurtcoke
Copy link

kurtcoke commented Oct 5, 2015

Do you use it as a proxy and send the data via http proxy over certain port? I don't really get how to use it as networked instance. (And would love to try it out.)
Thanks.

@marnao
Copy link
Contributor

marnao commented Oct 6, 2015

@kurtcoke cloudscan.py provides an example implementation for how to use the client library that is included in the framework.

We plan to release a couple of additional clients (besides cloudscan) in the near future including a milter server that can be integrated with a mail relay, and an ICAP server that can be integrated with a proxy server. These will obviously make laikaboss more immediately useful. If you write a laikaboss client for any other system (like a passive NIDS) please feel free to share it back.

@kurtcoke
Copy link
Author

kurtcoke commented Oct 7, 2015

Cool I don't really get how to use it yet. Where can I get the docs from the blackhat workshop on Laikaboss? Thanks.

@cfossace
Copy link

@kurtcoke what is your email? I don't have write permission to this repo so I can't attach the pdf

@cfossace
Copy link

also, the slides don't really explain how to invoke it, so I can explain here!

  1. open two different terminals of your laikaboss directory
  2. use one to run "laikad.py". This is your server
  3. Use cloudscan.py as your client, and then invoke it as you would invoke laika.py

@cfossace
Copy link

ubuntu

@kurtcoke
Copy link
Author

@cfossace I get that part I just dont get how you can run it as a proxy and have all your traffic pass through it? Does that make sense?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants