| Port details |
- caldera4 Automated Adversary Emulation Platform
- 4.2.0_12 security
 =3      4.2.0_9Version of this port present on the latest quarterly branch. - Maintainer: acm@FreeBSD.org
- Port Added: 2024-02-17 21:24:05
- Last Update: 2024-08-09 06:24:08
- Commit Hash: aa8c011
- People watching this port, also watch:: prestashop, courier-authlib-userdb, rubygem-fluent-plugin-file-alternative, nagios-check_hdd_health, pure-ftpd
- Also Listed In: python
- License: APACHE20
- WWW:
- https://github.com/mitre/caldera
- Description:
- CALDERA a cyber security platform designed to easily automate adversary
emulation, assist manual red-teams, and automate incident response.
It is built on the MITRE ATT&CK framework and is an active research project
at MITRE.
The framework consists of two components:
- The core system. This is the framework code, consisting of what is available
in this repository. Included is an asynchronous command-and-control (C2)
server with a REST API and a web interface.
- Plugins. These repositories expand the core framework capabilities and
providing additional functionality. Examples include agents, reporting,
collections of TTPs and more.
  ¦  ¦  ¦  ¦ 
- Manual pages:
- FreshPorts has no man page information for this port.
- pkg-plist: as obtained via:
make generate-plist - Dependency lines:
-
- caldera4>0:security/caldera4
- Conflicts:
- CONFLICTS:
- To install the port:
- cd /usr/ports/security/caldera4/ && make install clean
- To add the package, run one of these commands:
- pkg install security/caldera4
- pkg install caldera4
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.- PKGNAME: caldera4
- Flavors: there is no flavor information for this port.
- distinfo:
- TIMESTAMP = 1687320760
SHA256 (mitre-caldera-4.2.0_GH0.tar.gz) = 2c93501ca05fe89cd18a038376c278e50d371881dfe84824a0f98dc3d9023fd9
SIZE (mitre-caldera-4.2.0_GH0.tar.gz) = 3777586
Packages (timestamps in pop-ups are UTC):
- Dependencies
- NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
- Build dependencies:
-
- go121 : lang/go121
- python3.11 : lang/python311
- Test dependencies:
-
- python3.11 : lang/python311
- Runtime dependencies:
-
- py311-aiohttp>0 : www/py-aiohttp@py311
- py311-aiohttp-jinja2>0 : www/py-aiohttp-jinja2@py311
- py311-aiohttp-session>0 : www/py-aiohttp-session@py311
- py311-aiohttp-security>0 : security/py-aiohttp-security@py311
- py311-aiohttp-apispec>0 : devel/py-aiohttp-apispec@py311
- py311-Jinja2>0 : devel/py-Jinja2@py311
- py311-pyyaml>=0 : devel/py-pyyaml@py311
- py311-websockets>0 : devel/py-websockets@py311
- py311-sphinx>0 : textproc/py-sphinx@py311
- py311-docutils>0 : textproc/py-docutils@py311
- py311-sphinx_rtd_theme>0 : textproc/py-sphinx_rtd_theme@py311
- py311-myst-parser>0 : textproc/py-myst-parser@py311
- py311-marshmallow>0 : devel/py-marshmallow@py311
- py311-dirhash>0 : security/py-dirhash@py311
- py311-docker>0 : sysutils/py-docker@py311
- py311-donut-shellcode>0 : devel/py-donut-shellcode@py311
- py311-marshmallow-enum>0 : devel/py-marshmallow-enum@py311
- py311-ldap3>0 : net/py-ldap3@py311
- py311-lxml>0 : devel/py-lxml@py311
- py311-reportlab>0 : print/py-reportlab@py311
- py311-svglib>0 : converters/py-svglib@py311
- py311-markdown>0 : textproc/py-markdown@py311
- py311-dnspython>0 : dns/py-dnspython@py311
- py311-asyncssh>0 : security/py-asyncssh@py311
- py311-aioftp>0 : ftp/py-aioftp@py311
- py311-pyautogui>0 : x11/py-pyautogui@py311
- py311-selenium>0 : www/py-selenium@py311
- py311-webdriver_manager>0 : www/py-webdriver_manager@py311
- py311-beautifulsoup>0 : www/py-beautifulsoup@py311
- py311-networkx>0 : math/py-networkx@py311
- py311-numpy>0 : math/py-numpy@py311
- upx>0 : archivers/upx
- base64>0 : converters/base64
- git>0 : devel/git
- bash>0 : shells/bash
- haproxy24>0 : net/haproxy24
- go121 : lang/go121
- py311-cryptography>=42.0.8,1 : security/py-cryptography@py311
- python3.11 : lang/python311
- This port is required by:
- for Run
-
- security/caldera-ot
Configuration Options:- ===> The following configuration options are available for caldera4-4.2.0_12:
HAPROXY=on: Support for HTTPS
===> Use 'make config' to modify these settings
- Options name:
- security_caldera4
- USES:
- dos2unix go:run python
- pkg-message:
- For install:
- Caldera 4 port was installed
1) Take on mind it is a modifying version of Caldera for include FreeBSD as
supported OS and you could found some issues. Problem reports are welcome.
2) Add the following lines to /etc/rc.conf
# sysrc caldera_enable="YES"
or enable it from service command
# service caldera enable
3) Before of start Caldera you must run some scripts for generate/update payload
files
# su -m caldera -c 'cd /usr/local/www/caldera/plugins/manx && \
setenv GOCACHE /tmp/caldera/.cache; setenv GOMODCACHE /tmp/caldera/.vendor; \
sh update-shells.sh'
# su -m caldera -c 'cd /usr/local/www/caldera/plugins/sandcat && \
setenv GOCACHE /tmp/caldera/.cache; setenv GOMODCACHE /tmp/caldera/.vendor; \
sh update-agents.sh'
4) Do not forget modify configuration files before of run Caldera. For default
it runs in insecure mode (http). Caldera configuration files are located at
/usr/local/www/caldera/conf
5) You can change default user passwords modifying default.yml file into
/usr/local/www/caldera/conf folder. By default Caldera uses admin/admin,
blue/admin or red/admin like user/password.
# sed -i "" -e "s|admin: admin|admin: `openssl rand -base64 14`|g" default.yml
# sed -i "" -e "s|blue: admin|blue: `openssl rand -base64 14`|g" default.yml
# sed -i "" -e "s|red: admin|red: `openssl rand -base64 14`|g" default.yml
6) If you want run it in secure mode (https) take a look in ssl plugin section:
https://caldera.readthedocs.io/en/latest/Plugin-library.html#ssl
7) Start Caldera service
# service caldera start
8) When Caldera is starting, atomic plugin will use git to download files from
the following link:
https://github.com/redcanaryco/atomic-red-team
Currently, the project does not include FreeBSD like a supported platform.
For this reason, Atomic plugin was patched for download atomic-red-team
files from the following repository until my pull request will be merge into
redcanaryco/atomic-red-team:
https://github.com/alonsobsd/atomic-red-team
Those files are necessary for generate yml files used by Caldera abilities
9) Caldera web listens on port 8888 by default
http://your_caldera_server_ip:8888
10) Log file is located at /var/log/caldera.log
11) For more configure information you can look at the following link:
https://caldera.readthedocs.io/en/latest/
12) Enjoy it
- Master Sites:
|
| Commit History - (may be incomplete: for full details, see links to repositories near top of page) |
| Commit | Credits | Log message |
|---|
4.2.0_12
09 Aug 2024 06:24:08
 |
Ashish SHUKLA (ashish) |
all: Bump after lang/go121 update |
4.2.0_11
07 Jul 2024 08:05:33
|
Po-Chuan Hsieh (sunpoet) |
devel/py-pyyaml: Move devel/py-yaml to devel/py-pyyaml
- Bump PORTREVISION of dependent ports for dependency change |
4.2.0_10
03 Jul 2024 08:29:54
|
Ashish SHUKLA (ashish) |
all: Bump after lang/go121 update |
4.2.0_9
15 Jun 2024 09:52:17
|
Ashish SHUKLA (ashish) |
all: Bump after lang/go121 update
MFH: 2024Q2 |
4.2.0_8
20 May 2024 10:33:03
|
Vsevolod Stakhov (vsevolod) |
security/libsodium: update to 1.0.19, bump dependent ports
PR: 278259
Reported by: Andrey Korobkov <alster-vinterdalen.se> |
4.2.0_7
13 May 2024 17:56:04
|
Ashish SHUKLA (ashish) |
all: Bump after lang/go121 update
MFH: 2024Q2 |
4.2.0_6
15 Apr 2024 08:20:04
|
Ashish SHUKLA (ashish) |
all: Bump after lang/go121 update
MFH: 2024Q2 |
4.2.0_5
24 Mar 2024 14:29:00
|
Muhammad Moinur Rahman (bofh) |
lang/go: Change DEFAULT to 1.21
PR: 277776
Approved by: portmgr (exp-run) |
4.2.0_4
17 Feb 2024 21:20:14
|
Jose Alonso Cardenas Marquez (acm) |
security/caldera4: Repocopy from security/caldera
- Update pkg-message.in
- Update haproxy dependency to 2.4.x
- Fix permission issues with some caldera directories
- Bump PORTREVISION |
As an Amazon Associate I earn from qualifying purchases.