honeypots 0.5

Easy to setup honeypots!

Easy to setup customizable honeypots for monitoring network traffic, bots activities and usernamepassword credentials

Current Servers/Emulators

• QDNSServer <- DNS (Server using Twisted)

• QFTPServer <- FTP (Server using Twisted)

• QHTTPProxyServer <- HTTP Proxy (Server using Twisted)

• QHTTPServer <- HTTP (Server using Twisted)

• QHTTPSServer <- HTTPS (Server using Twisted)

• QIMAPServer <- IMAP (Server using Twisted)

• QMysqlServer <- Mysql (Emulator using Twisted)

• QPOP3Server <- POP3 (Server using Twisted)

• QPostgresServer <- Postgres (Emulator using Twisted)

• QRedisServer <- Redis (Emulator using Twisted)

• QSMBServer <- SMB (Server using impacket)

• QSMTPServer <- STMP (Server using smtpd)

• QSOCKS5Server <- SOCK5 (Server using socketserver)

• QSSHServer <- SSH (Server using socket)

• QTelnetServer <- TELNET (Server using Twisted)

• QVNCServer <- VNC (Emulator using Twisted)

Usage Example - Easy! (ssh, http, https.. honeypot)

pip install honeypots
python3 -m honeypots ssh,http,https

Usage Example as Objects (ssh honeypot)

Import your target honeypot

#ip= String E.g. 0.0.0.0
#port= Int E.g. 9999
#username= String E.g. Test
#password= String E.g. Test
#mocking= Boolean or String E.g OpenSSH 7.0
#logs= String E.g db, terminal or all
#always remember to add process=true to run_server() for non-blocking

from honeypots import QSSHServer
qsshserver = QSSHServer(port=9999)
qsshserver.run_server(process=True)

Test the honeypot

ssh test@127.0.0.1

Honeypot answer

INFO:chameleonlogger:['servers', {'status': 'success', 'username': 'test', 'ip': '127.0.0.1', 'server': 'ssh_server', 'action': 'login', 'password': 'test', 'port': 38696}]

Close the honeypot

qsshserver.kill_server()

Usage Example as Objects and test (ssh honeypot)

Import your target honeypot

from honeypots import QSSHServer
qsshserver = QSSHServer()
qsshserver.run_server(process=True, auto=True)
qsshserver.test_server()
qsshserver.kill_server()

acknowledgement

By using this framework, you are accepting the license terms of all these packages: pipenv twisted psutil psycopg2-binary dnspython requests impacket paramiko redis mysql-connector pycryptodome vncdotool service_identity requests[socks]