https://github.com/honeynet/ghost-usb-honeypot

A honeypot for malware that propagates via USB storage devices
https://github.com/honeynet/ghost-usb-honeypot

Last synced: 3 months ago
JSON representation

A honeypot for malware that propagates via USB storage devices

• Host: GitHub
• URL: https://github.com/honeynet/ghost-usb-honeypot
• Owner: honeynet
• License: gpl-3.0
• Created: 2015-03-23T17:01:13.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2015-03-24T14:35:53.000Z (over 9 years ago)
• Last Synced: 2024-04-15T13:22:45.196Z (7 months ago)
• Language: C
• Homepage:
• Size: 1.04 MB
• Stars: 91
• Watchers: 11
• Forks: 26
• Open Issues: 3
• Metadata Files:
  • Readme: README
  • Changelog: CHANGELOG
  • License: COPYING

Awesome Lists containing this project

• awesome-honeypot - **57**星

README

        
                    README

Ghost is a honeypot for malware that uses USB storage devices

for propagation. It is able to capture such malware without

any further knowledge -- in particular, it doesn't need signatures

or the like to accomplish its task.

Detection is achieved by emulating a USB flash drive on

Windows systems and observing the emulated device. The assumption

is that on an infected machine the malware will eventually

copy itself to the removable device.

See http://code.google.com/p/ghost-usb-honeypot/ for more details.