search

0x4D31 / honeybits

A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
GNU General Public License v3.0
273 stars 45 forks source link

honeybits in the same machine with honeypot #2

Closed nassimabedi closed 6 years ago

nassimabedi commented 6 years ago

Is it possible(or useful) to install honeybits in the same machine that honeypots run?

Waseem-farooqui commented 6 years ago

Yes it is possible to use honeybits on the same machine on which we are running honeypots, as far as usefulness is concern it don't think its useful because it makes no sense. There are scenarios then how do you want to deploy them where do you want to deploy it. The actual value of honeybits or honeytokens lies in their deployment.

0x4D31 commented 6 years ago

@nassimabedi Yes, as @Waseem-farooqui said, it doesn't make sense to run it on the honeypot itself, as its main purpose is to lure the attackers toward the honeypots or trigger an alert when someone touches honeyfiles.

nassimabedi commented 6 years ago

@Waseem-farooqui @0x4D31 Thanks for reply :slightly_smiling_face: