https://github.com/rshipp/slipm-honeypot

A simple low-interaction port monitoring honeypot.
https://github.com/rshipp/slipm-honeypot

detection honeypot ids linux low-interaction-honeypot netcat notifications shell

Last synced: about 1 month ago
JSON representation

A simple low-interaction port monitoring honeypot.

• Host: GitHub
• URL: https://github.com/rshipp/slipm-honeypot
• Owner: rshipp
• Created: 2012-07-10T00:04:36.000Z (over 12 years ago)
• Default Branch: main
• Last Pushed: 2020-06-14T23:55:39.000Z (over 4 years ago)
• Last Synced: 2024-08-03T23:04:53.863Z (4 months ago)
• Topics: detection, honeypot, ids, linux, low-interaction-honeypot, netcat, notifications, shell
• Language: Shell
• Homepage:
• Size: 7.81 KB
• Stars: 16
• Watchers: 3
• Forks: 5
• Open Issues: 0
• Metadata Files:
  • Readme: README

Awesome Lists containing this project

• awesome-honeypot - **9**星 - interaction port monitoring honeypot. (<a id="a53d22b9c5d09dc894413453f4755658"></a>未分类)

README

        
This is a simple low-interaction port monitoring honeypot, designed

primarily for research and detection purposes. It uses netcat as a

port listener, tshark to attempt to capture attack traffic, and (by

default) notify-send to alert the user when a possible attack is

detected. The honeypot itself is written in bash, and allows for easy

extension of emulated services with additional bash scripts. In order

to increase security, the script should NOT be run as root, or with

any elevated privelages. All it needs is the ability to run the

required programs, read permissions on its plugins and

configuration, and write permissions in whatever directory you 

choose to save the logs and in /tmp.