search

sefcom / honeyplc

High-interaction Honeypot for PLCs and Industrial Control Systems
GNU General Public License v3.0
69 stars 17 forks source link

I have no idea how to use these nmap profles #3

Open yanxinye opened 2 years ago

yanxinye commented 2 years ago

I copied the codes from honeyplc/plc-profiles/Siemens S7-300/s7-300-nmap-fingerprint.txt and pasted them into nmap.prints. After this I created a template file and ran it with sudo honeyd -d -f config.s7-300 192.168.0.0/24 and kept getting parse errors with the fingerprints which I have just added. I wonder if I made a wrong use of these plc profiles and how to use it correctly thx

offblacc commented 1 year ago

Make sure you copied it to the correct prints, the ones in honeyd not in nmap itself Also, this version of nmap, the one required for honeyplc/honeyd has issues in its own fingerprints file (see: https://github.com/nmap/nmap/issues/946) which has been resolved in a newer version I got around this by not copying the prints from nmap's nmap-os-db, and only appending the Siemens S7-300 (the one I'm using) fingerprint from here to the honeydb's nmap-os-db file