Collaborate Disseminate
I am having a little trouble working out where I can find the honeypot logs using Cowrie. What is the path to the current gathered information?
I am utilising Honeynet OS on a Raspberry Pi
Continue reading How to view honeypot logs using Cowrie [on hold]
Hajime (meaning ‘beginning’ in Japanese) is an IoT worm that was first mentioned on 16 October 2016 in a public report by RapidityNetworks. In this blogpost we outline some of the recent ‘improvements’ to Hajime, some techniques that haven’t been made public, and some statistics about infected IoT devices. Continue reading Hajime, the mysterious evolving botnet
I am running a honeypot and I got the following string:
‘\x16\x03\x01\x01.\x01\x00\x01*\x03\x03\xf2\xbd\x89\x19A”\xbe\xfa\xd4~/\xdb\xd9\xe6\xe7tD\x16/\x12\xb5?\xb6\xf5%\xac\xf1\xd96\x18\x10c\x00\x00\xac\xc00\xc0,\xc0(\xc0$\xc0\x14\xc0\n\x00\xa5\x00\xa3\x00\xa1\x00\x9f\x00k\x00j\x00i\x00h\x009\x008\x007\x006\x00\x88\x00\x87\x00\x86\x00\x85\xc02\xc0.\xc0*\xc0&\xc0\x0f\xc0\x05\x00\x9d\x00=\x005\x00\x84\xc0/\xc0+\xc0\’\xc0#\xc0\x13\xc0\t\x00\xa4\x00\xa2\x00\xa0\x00\x9e\x00g\x00@\x00?\x00>\x003\x002\x001\x000\x00\x9a\x00\x99\x00\x98\x00\x97\x00E\x00D\x00C\x00B\xc01\xc0-\xc0)\xc0%\xc0\x0e\xc0\x04\x00\x9c\x00<\x00/\x00\x96\x00A\x00\x07\xc0\x11\xc0\x07\xc0\x0c\xc0\x02\x00\x05\x00\x04\xc0\x12\xc0\x08\x00\x16\x00\x13\x00\x10\x00\r\xc0\r\xc0\x03\x00\n\x00\xff\x01\x00\x00U\x00\x0b\x00\x04\x03\x00\x01\x02\x00\n\x00\x1c\x00\x1a\x00\x17\x00\x19\x00\x1c\x00\x1b\x00\x18\x00\x1a\x00\x16\x00\x0e\x00\r\x00\x0b\x00\x0c\x00\t\x00\n\x00#\x00\x00\x00\r\x00
\x00\x1e\x06\x01\x06\x02\x06\x03\x05\x01\x05\x02\x05\x03\x04\x01\x04\x02\x04\x03\x03\x01\x03\x02\x03\x03\x02\x01\x02\x02\x02\x03\x00\x0f\x00\x01\x01’
When I try to decode this usimg python’s .decode(“hex”) I get the following error:
Non-hexadecimal digit found
I also have another string:
“\x16\x03\x03\x00\xcc\x01\x00\x00\xc8\x03\x03X\xf2e\x9c\x11\x89\x07\x86\xc6\xe5\xf4\xa5\xef\xf8$\xdf\xd2Ul\xeeGw\x83yID\xd7\x8b\xd4\xf4\xba\x1a\x00\x00<\xc0,\xc0+\xc00\xc0/\x00\x9f\x00\x9e\xc0$\xc0#\xc0(\xc0’\xc0\n\xc0\t\xc0\x14\xc0\x13\x009\x003\x00\x9d\x00\x9c\x00=\x00<\x005\x00/\x00\n\x00j\x00@\x008\x002\x00\x13\x00\x05\x00\x04\x01\x00\x00c\x00\x00\x00*\x00(\x00\x00%auth.api.sonyentertainmentnetwork.com\x00\n\x00\x06\x00\x04\x00\x17\x00\x18\x00\x0b\x00\x02\x01\x00\x00\r\x00\x14\x00\x12\x04\x01\x05\x01\x02\x01\x04\x03\x05\x03\x02\x03\x02\x02\x06\x01\x06\x03\x00#\x00\x00\x00\x17\x00\x00\xff\x01\x00\x01\x00”
And with this one I get this error:
Odd-length string
How do I decode these strings?
How can I make a honeypot on my ubuntu docker? I want to create an ftp honeypot. Is there any way I can make vulnerable ftp connection and if any IP connects to it then I will get the IP?
How can I accomplish my task?
Continue reading Making ftp honeypot from scratch on ubuntu docker
I’ve installed a Kippo honeypot on my server and I wanted to know if there are some tools I can launch to collect more information about the cracker.
I want more information to be able to start some forensics stuff.
I have a telnet and ssh honeypot (more specifically, cowrie). Most viruses I get there are designed for routers, cameras, etc…
The virtualization software I am using is VirtualBox, and I am using it with cuckoo sandbox, wh… Continue reading What OS should I use for sandboxing/running viruses designed for IoT devices?
Within the last few weeks I have been noticing massive amounts of bot traffic coming out of a small geographical area. I have implemented the robots.txt into my ASP.net project, but as I understand it, this is only intended t… Continue reading Potential Issues and downfalls of the "honeyPot" in asp.net mvc
I have been reading about honeypots and different implementation of them, while some articles are recent most of them are old (more than ten years ago) I was wondering if honeypots are still relevant and used in the industry … Continue reading How relevant is the honeypot technique today?
What happens when you swap a modem and router out with a different modem and router?
Can you achieve full isolation by alternating between which network is plugged into the Internet line?
I am looking for full isolation of … Continue reading Full isolation of a honeypot on a single Internet line?
I have set up the kippo-graph in my machine but I can’t seem to access the page ,the page simply won’t load .
Here are some screenshots of what I’m trying to do :
The highlighted area is where the kippo-graph is saved