search

thinkst / opencanary

Modular and decentralised honeypot
http://opencanary.org
BSD 3-Clause "New" or "Revised" License
2.31k stars 360 forks source link

RDP session #184

Closed dustinskeeters closed 2 years ago

dustinskeeters commented 2 years ago

I see that there is a previous post about this but I can't find a guide to resolve the issue. I am trying to use OpenCanary for a RDP Honeypot project I am doing. I just need to know how to install the RDP module. I go to start OpenCanary and it states "Can't import RDP. Please ensure you have RDP installed" How do I proceed?

HybridAU commented 2 years ago

The short answer is that RDP doesn't really work.

The longer answer is that we used the rdpy library to make an RDP honey pot, but that library has not had an update since 2015 and only ever supported Python 2 which was end-of-lifed on 1 January 2020. It might be possible to get an old copy of OpenCanary, run it with Python 2 and install the rdpy library.

I naively thought that replacing RPD should be pretty straight forward, after all we don't need to implement the full protocol, just enough of NLA to accept a client connection and then reject the login regardless of what credentials are provided. But after sinking a lot of time into, it just got more and more complex.

Last time I searched for an RDP library that supports Python 3 I didn't find anything useful, I'm not sure how much has changed since then.

dustinskeeters commented 2 years ago

Thank you for the input. Thats really all I needed to know. I will try and find another solution for an RDP Honeypot. Thank you for the help.

jayjb commented 2 years ago

Hi @dustinskeeters,

Sorry for the delay. @HybridAU is totally spot on (as always 😄 ). But we are actually looking at an alternative and hopefully we can put it back into the Opencanary project soon.