https://github.com/d1str0/drupot

Drupal Honeypot
https://github.com/d1str0/drupot

Last synced: 23 days ago
JSON representation

Drupal Honeypot

• Host: GitHub
• URL: https://github.com/d1str0/drupot
• Owner: d1str0
• License: mit
• Created: 2019-02-21T23:45:04.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2019-07-14T03:50:37.000Z (over 5 years ago)
• Last Synced: 2024-10-30T15:51:11.724Z (about 1 month ago)
• Language: HTML
• Size: 106 KB
• Stars: 57
• Watchers: 1
• Forks: 11
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Changelog: changelogs/CHANGELOG-7.63.txt
  • License: LICENSE

Awesome Lists containing this project

• awesome-honeypots - drupo - Drupal Honeypot. (Honeypots)
• awesome-honeypots - drupo - Drupal Honeypot. (Honeypots)
• fucking-awesome-honeypots - drupo - Drupal Honeypot. (Honeypots)
• awesome-honeypot - **53**星

README

        
# Drupot

Drupal Honeypot

## Installation

Drupot supports go modules. 

`go get github.com/d1str0/drupot`

`go build`

## Running Drupot

`./drupot -c config.toml`

## Configuration

`config.toml.example` contains an example of *all* currently available

configuration options.

### Drupal

    [drupal]

    port = 80

    changelog_filepath = "changelogs/CHANGELOG-7.63.txt"

`port` allows you to set the http port to listen on. Currently, this is only ever

served over http. Future versions will support https.

`changelog_filepath` allows you to set what exactly is returned in the

/CHANGELOG.txt file. This allows you to save multiple versions of the CHANGELOG

and serve them at different times. This allows you to mimic different versions

of Drupal.

### hpfeeds

    [hpfeeds]

    enabled = true

    host = "hpfeeds.threatstream.com"

    port = 10000

    ident = "agave"

    auth = "somesecret"

    channel = "agave.events"

    meta = "Drupal scan event detected"

hpfeeds can be enabled for logging if wanted. Supply host, port, ident, auth,

and channel information relevant to an hpfeeds broker you want to report to. 

`meta` provides a static string to send in every hpfeeds request. Could be use

to differentiate Drupal versions hosted by honeypot or used to differentiate

Drupot data in busy hpfeeds channels.

### Fetch Public IP

    [fetch_public_ip]

    enabled = true

    urls = ["http://icanhazip.com/", "http://ifconfig.me/ip"]

    

If enabled, Drupot will attempt to fetch the public IP of itself from the listed

URLs. If enabled and no public IP can be fetched, Drupot will quit.

## Sister Projects

* [Magenpot](https://github.com/trevorleake/magenpot), a Magento honeypot

* [bbpot](https://github.com/d1str0/bbpot), a phpBB honeypot (WIP)

* [Presspot](https://github.com/brooks42/presspot), a WordPress honeypot (WIP)