https://github.com/andrewmichaelsmith/honeypot-setup-script

Honeypot (Dionaea and kippo) setup script
https://github.com/andrewmichaelsmith/honeypot-setup-script

Last synced: 3 months ago
JSON representation

Honeypot (Dionaea and kippo) setup script

• Host: GitHub
• URL: https://github.com/andrewmichaelsmith/honeypot-setup-script
• Owner: andrewmichaelsmith
• Created: 2013-01-15T15:03:52.000Z (almost 12 years ago)
• Default Branch: master
• Last Pushed: 2016-11-09T01:26:47.000Z (about 8 years ago)
• Last Synced: 2024-04-13T13:45:09.059Z (7 months ago)
• Language: Shell
• Homepage:
• Size: 288 KB
• Stars: 81
• Watchers: 21
• Forks: 34
• Open Issues: 5
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-honeypot - **73**星

README

        
Succeeded by [manuka](https://github.com/andrewmichaelsmith/manuka)

honeypot-setup-script

=====================

A script to install and deploy a honeypot automatically and without user interaction. 

Currently installs and sets up:

* kippo

* dionaea

* p0f

These will all be installed as system services so running this script once should turn a vanilla install in to a robust honeypot. Aims to use useful _and secure_ defaults. 

Currently tested on **Ubuntu 12.04**

**Use with caution**: This script will happily and without prompt overwrite files, change the port your SSH server runs and all sorts. It is intended to be run on a vanilla install of Ubuntu 12.04. No thoughts have been made for the integrity of existing installations of softwar - so be careful!

Usage

---------------------

**This can script can cause damage to your system. It is meant only to be used on a vanilla installation**

Only run this if you **know what you are doing**.

    wget -q https://raw.github.com/andrewmichaelsmith/honeypot-setup-script/master/setup.bash -O /tmp/setup.bash && bash /tmp/setup.bash

Effects

---------------------

* Moves SSH server from port 22 to 65534

* Installs [Dionaea](http://dionaea.carnivore.it/), [Kippo](https://github.com/desaster/kippo), [p0f](http://lcamtuf.coredump.cx/p0f3/#/)

* Sets up Dionaea, Kippo and p0f as system services that run on startup

Directory Structure

---------------------

**Logging**

* Dionaea: `/var/dionaea/`

* Kippo: `/var/kippo/`

* p0f: `/var/p0f/`

**Configuration**

* Dionaea: /etc/dionaea

* Kippo: /etc/kippo

**Binaries**

* Dionaea: `/usr/bin/dionaea`

* Kippo: `/opt/kippo`

* p0f: `/usr/sbin/p0f`