HellPot is an endless honeypot based on Heffalump that sends unruly HTTP bots to hell.
Notably it implements a toml configuration file, has JSON logging, and comes with significant performance gains.
Clients (hopefully bots) that disregard robots.txt
and connect to your instance of HellPot will suffer eternal consequences.
HellPot will send an infinite stream of data that is just close enough to being a real website that they might just stick around until their soul is ripped apart and they cease to exist.
Under the hood of this eternal suffering is a markov engine that chucks bits and pieces of The Birth of Tragedy (Hellenism and Pessimism) by Friedrich Nietzsche at the client using fasthttp.
HellPot should probably be built with Go version 1.17 or higher.
HellPot uses go modules. This should make it dead simple to build with a stock Go installation. To make it even simpler, we've added a GNU Makefile.
1 ) git clone https://github.com/yunginnanet/HellPot
2 ) cd HellPot
4 ) make
5 ) Consider the potential grave consequences of your actions.
In the event of a missing configuration file, HellPot will attempt to place it's default config in $HOME/.config/HellPot/config.toml. This allows irresponsible souls to begin raining hellfire with ease, immediately:
1 ) Download a compiled release
2 ) Run binary and immediately begin sending clients directly to hell.
1 ) Configure webserver as reverse proxy (see below)
2 ) ./HellPot --genconfig
3 ) Edit your newly generated config.toml
as desired.
4 ) Ponder your existence server's ability to handle your chosen performance values.
5 ) ./HellPot -c config.toml
666 ) ๐ออ๐ฬออ๐อออ ๐จออ อ๐ อฬพอ๐ฎฬฝออ ๐อฬฬ๐จอออ ๐อฬอ๐ออ๐กออฬฝ๐กฬฬพฬ๐อฬฬ๐ฃฬพออ๐อฬอ.อฬอโ
[!TIP] Configuration values can be overridden with environment variables prefixed with
HELLPOT_
. When using this method, replace underscores in configuration keys with two underscores.e.g: to set
http.bind_addr
via env, setHELLPOT_HTTP_BIND__ADDR="x.x.x.x"
[deception]
# Used as "Server" HTTP header. Note that reverse proxies may hide this.
server_name = "nginx"
[http]
# TCP Listener (default)
bind_addr = "127.0.0.1"
bind_port = "8080"
# header name containing clients real IP, for reverse proxy deployments
real_ip_header = 'X-Real-IP'
# this contains a list of blacklisted useragent strings. (case sensitive)
# clients with useragents containing any of these strings will receive "Not found" for any requests.
uagent_string_blacklist = ["Cloudflare-Traffic-Manager", "curl"]
# Unix Socket Listener (will override default)
unix_socket_path = "/var/run/hellpot"
unix_socket_permissions = "0666"
use_unix_socket = false
[http.router]
# Toggling this to true will cause all GET requests to match. Forces makerobots = false.
catchall = false
# Toggling this to false will prevent creation of robots.txt handler.
makerobots = true
# Handlers will be created for these paths, as well as robots.txt entries. Only valid if catchall = false.
paths = ["wp-login.php", "wp-login"]
[logger]
# verbose (-v)
debug = true
# extra verbose (-vv)
trace = false
# JSON log files will be stored in the below directory.
directory = "/home/kayos/.local/share/HellPot/logs/"
# disable all color in console output. when using Windows this will default to true.
nocolor = false
# toggles the use of the current date as the names for new log files.
use_date_filename = true
[performance]
# max_workers is only valid if restrict_concurrency is true
max_workers = 256
restrict_concurrency = false