From 95b1c3fb3e49c66ce57d2d2287d24d18f88edbf8 Mon Sep 17 00:00:00 2001 From: Robert Dick Date: Fri, 1 May 2026 09:38:21 -0400 Subject: [PATCH 1/2] testbed for elasticsearch added --- elasticsearch/exposedui/README.md | 12 +++++++++ elasticsearch/exposedui/docker-compose.yml | 31 ++++++++++++++++++++++ 2 files changed, 43 insertions(+) create mode 100644 elasticsearch/exposedui/README.md create mode 100644 elasticsearch/exposedui/docker-compose.yml diff --git a/elasticsearch/exposedui/README.md b/elasticsearch/exposedui/README.md new file mode 100644 index 00000000..4955ebc7 --- /dev/null +++ b/elasticsearch/exposedui/README.md @@ -0,0 +1,12 @@ +# Elasticsearch Exposed UI Testbed + +## Vulnerable +docker run -d --name elasticsearch --net somenetwork -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:tag + +## Docker Compose +``` +docker compose up +``` +Vulnerable service will be at http://localhost:8081/ +Safe service will be at http://localhost:8082/ + diff --git a/elasticsearch/exposedui/docker-compose.yml b/elasticsearch/exposedui/docker-compose.yml new file mode 100644 index 00000000..db64b5ca --- /dev/null +++ b/elasticsearch/exposedui/docker-compose.yml @@ -0,0 +1,31 @@ +services: + elasticsearch-vuln: + container_name: elasticsearch-vuln + environment: + - cluster.name=vuln-cluster + - node.name=vuln-node + - network.host=0.0.0.0 + - xpack.security.enabled=false + - discovery.type=single-node + - ES_JAVA_OPTS=-Xms512m -Xmx512m + image: elasticsearch:9.3.4 + networks: + - vuln + ports: + - 8081:9200 + elasticsearch-safe: + container_name: elasticsearch-safe + environment: + - cluster.name=safe-cluster + - node.name=safe-node + - discovery.type=single-node + - ES_JAVA_OPTS=-Xms512m -Xmx512m + image: elasticsearch:9.3.4 + networks: + - safe + ports: + - 8082:9200 + +networks: + safe: + vuln: \ No newline at end of file From 91dbf46d67d9d74fa2a04558552828c0aab5e829 Mon Sep 17 00:00:00 2001 From: Robert Dick Date: Wed, 3 Jun 2026 02:17:09 -0400 Subject: [PATCH 2/2] removed plain docker instruction in favor of docker compose --- elasticsearch/exposedui/README.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/elasticsearch/exposedui/README.md b/elasticsearch/exposedui/README.md index 4955ebc7..5040cc7f 100644 --- a/elasticsearch/exposedui/README.md +++ b/elasticsearch/exposedui/README.md @@ -1,8 +1,5 @@ # Elasticsearch Exposed UI Testbed -## Vulnerable -docker run -d --name elasticsearch --net somenetwork -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" elasticsearch:tag - ## Docker Compose ``` docker compose up