Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/mushorg/glastopf
Web Application Honeypot
https://github.com/mushorg/glastopf
Last synced: 2 months ago
JSON representation
Web Application Honeypot
- Host: GitHub
- URL: https://github.com/mushorg/glastopf
- Owner: mushorg
- Created: 2012-11-15T21:57:07.000Z (over 11 years ago)
- Default Branch: master
- Last Pushed: 2023-10-22T11:26:28.000Z (8 months ago)
- Last Synced: 2024-03-26T13:24:07.789Z (3 months ago)
- Language: Python
- Homepage: http://glastopf.org
- Size: 2.9 MB
- Stars: 527
- Watchers: 52
- Forks: 172
- Open Issues: 0
-
Metadata Files:
- Readme: README.rst
- Changelog: Changelog.txt
Lists
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-honeypots - Glastopf - Web Application Honeypot. (Honeypots)
- paralax-awesome-honeypots - Glastopf - Web Application Honeypot. (<a name="honeypots"></a> Honeypots)
- paralax-awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-malware-analysis- - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-honeypot - **398**星
- awesome-honeypots - Glastopf - Web Application Honeypot. (Honeypots)
- awesome-honeypots - Glastopf - Web Application Honeypot. (Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-cyber-security - **396**星
- -awesome-honeypots- - Glastopf - Web Application Honeypot. (Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- awesome-honeypots - Glastopf - Web Application Honeypot. (Honeypots)
- awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- fucking-awesome-malware-analysis - Glastopf - Web application honeypot. (Malware Collection / Honeypots)
- fucking-awesome-honeypots - Glastopf - Web Application Honeypot. (Honeypots)
README
We highly recommend to check out the Glastopf successor `SNARE `_ and `TANNER `_.
Glastopf |Build Status|
=======================
.. |Build Status| image:: https://travis-ci.org/mushorg/glastopf.svg?branch=master
:target: https://travis-ci.org/mushorg/glastopf
ABOUT
-----
Glastopf is a Python web application honeypot founded by Lukas Rist.
General approach:
- Vulnerability *type* emulation instead of vulnerability emulation. Once a vulnerability type is emulated, Glastopf can handle unknown attacks of the same type. While implementation may be slower and more complicated, we remain ahead of the attackers until they come up with a new method or discover a new flaw in our implementation.
- Modular design to add new logging capabilities or attack type handlers. Various database capabilities are already in place. HPFeeds logging is supported for centralized data collection.
- Popular attack type emulation is already in place: Remote File Inclusion via a build-in PHP sandbox, Local File Inclusion providing files from a virtual file system and HTML injection via POST requests.
- Adversaries usually use search engines and special crafted search requests to find their victims. In order to attract them, Glastopf provides those keywords (AKA "dork") and additionally extracts them from requests, extending its attack surface automatically. As a result, the honeypot gets more and more attractive with each new attack attempted on it.
- We will make the SQL injection emulator public, provide IP profiling for crawler recognition and intelligent dork selection.
INSTALL
-------
Installation instructions can be found `here `_.
It is highly recommended to customize the default attack surface to avoid trivial detection of the honeypot.