https://github.com/macmod/vnchoneypot
Very simple VNC honeypot.
https://github.com/macmod/vnchoneypot
Last synced: about 1 year ago
JSON representation
Very simple VNC honeypot.
- Host: GitHub
- URL: https://github.com/macmod/vnchoneypot
- Owner: Macmod
- Created: 2018-07-25T18:00:45.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2018-07-25T18:16:32.000Z (almost 8 years ago)
- Last Synced: 2025-02-01T01:07:23.533Z (over 1 year ago)
- Language: Shell
- Homepage:
- Size: 1000 Bytes
- Stars: 1
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# VNCHoneypot
This repository *is not* a fully functioning VNC honeypot.
This repository is a tutorial and set of scripts needed to make a very simple VNC honeypot.
# Tutorial
1. Setup a virtualbox VM.
2. Enable bridging in virtualbox.
3. Setup [static IP](https://superuser.com/questions/456057/static-ip-for-ubuntu-server-in-virtualbox-using-bridged-adapter) in guest.
4. Install x11vnc in guest.
5. Run in guest:
```bash
$ sudo x11vnc -nopw -forever -shared -dontdisconnect &
```
6. Run in host (in separate windows):
To forward your machine's port 5900 to the guest:
```bash
$ ./forward.sh
```
To dump all traffic on port 5900:
```bash
$ sudo ./tcpdump.sh log.cap
```
To open a live log of connections to port 5900:
```bash
$ ./live-log.sh
```
Once you have a logfile, you can check source IPs with:
```bash
$ ./get-src-ips.sh log.cap
```