HoneyThing is a honeypot for Internet of TR-069 things. It's designed to act as completely a modem/router that has RomPager embedded web server and supports TR-069 (CWMP) protocol.
Project idea was created by Ali Ikinci and offered as Honeynet GSoC project in 2015.
Basic features:
Debian and RPM packages will be available soon.
There're 2 ways to install HoneyThing:
For all of them, your system must have Python 2.7 (or above) and PycURL package.
Setup Script: Using setup script requires python setuptools package installed on the system. After downloading and extracting HoneyThing, you can simply go to extracted directory and run;
python setup.py install
Pre-Built Packages: HoneyThing can be installed by using pre-built packages for Ubuntu and CentOS. Packages can be downloaded from download section and will be added for any stable release.
For Ubuntu;
dpkg -i honeything_x.y.z.deb
For CentOS;
rpm -i honeything_x.y.z.rpm
After installation, some parameters can be changed optional by using configuration file. There're 4 section in config file:
If you installed HoneyThing with setup script or pre-built packages, honeything can be run by using following commands:
service honeything {start|stop|restart|status}
or
/etc/init.d/honeything {start|stop|restart|status}
A paper about this project is published (in TURKISH) at International Conference on Information Security and Cryptology [ISCTurkey 2015]. It is accessible online from here.
The project:
and special thanks to Bâkır Emre for taking the first step.
Note: This project is also being developed as Istanbul Sehir University master's thesis.