Succeeded by manuka

honeypot-setup-script

A script to install and deploy a honeypot automatically and without user interaction.

Currently installs and sets up:

kippo
dionaea
p0f

These will all be installed as system services so running this script once should turn a vanilla install in to a robust honeypot. Aims to use useful and secure defaults.

Currently tested on Ubuntu 12.04

Use with caution: This script will happily and without prompt overwrite files, change the port your SSH server runs and all sorts. It is intended to be run on a vanilla install of Ubuntu 12.04. No thoughts have been made for the integrity of existing installations of softwar - so be careful!

Usage

This can script can cause damage to your system. It is meant only to be used on a vanilla installation

Only run this if you know what you are doing.

wget -q https://raw.github.com/andrewmichaelsmith/honeypot-setup-script/master/setup.bash -O /tmp/setup.bash && bash /tmp/setup.bash

Effects

Moves SSH server from port 22 to 65534
Installs Dionaea, Kippo, p0f
Sets up Dionaea, Kippo and p0f as system services that run on startup

Directory Structure

Logging

Dionaea: /var/dionaea/
Kippo: /var/kippo/
p0f: /var/p0f/

Configuration

Dionaea: /etc/dionaea
Kippo: /etc/kippo

Binaries

Dionaea: /usr/bin/dionaea
Kippo: /opt/kippo
p0f: /usr/sbin/p0f