search

MrMugiwara / Honeypot

A honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information Systems.
GNU General Public License v3.0
0 stars 2 forks source link

readme

alt tag

Documentation

The Pentbox is a safety kit containing various tools for streamlining PenTest conducting a job easily.
It is programmed in Ruby and oriented to GNU / Linux, with support for Windows, MacOS and every systems where Ruby is installed.
In this small Documentation we will explain how to set up a honeypot in Kali Linux.
If you don’t know what is a honeypot,
“a honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information Systems.“

Download Pentbox:

Simply type in the following command in your terminal to download pentbox-1.8.

                 root@MrMugiwara:~# git clone git@github.com:MrMugiwara/Honeypot.git

Run pentbox ruby script

Change directory into pentbox folder

                 root@MrMugiwara:~# cd Honeypot/

                 root@MrMugiwara:~/Honeypot# ls

Run pentbox using the following command

                root@MrMugiwara:~/Honeypot# ./pentbox.rb

Setup a honeypot

Use option 2 (Network Tools) and then option 3 (Honeypot).

Finally for first test, choose option 1 (Fast Auto Configuration) This opens up a honeypot in port 80. Simply open browser and browse to http://10.0.2.15 (where 10.0.2.15 is your IP Address. You should see an Access denied error. and in the terminal you should see “HONEYPOT ACTIVATED ON PORT 80” followed by “INTRUSION ATTEMPT DETECTED”.

alt tag

Now, if you do the same steps but this time select Option 2 (Manual Configuration), you should see more extra options

alt tag

Do the same steps but select port 22 this time (SSH Port).
Then do a port forwarding in your home router to forward port external port 22 to this machines’ port 22. Alternatively, set it up in a VPS in your cloud server.
You’d be amazed how many bots out there scanning port SSH continuously.
You know what you do then? You try to hack them back for Lulz :)