honeyscanner - Honeyscanner: A vulnerability analyzer for honeypo

项目说明

<di="center">
<img src="./images/honeyscanner_logo.png" alt="Honeyscanner logo" width="400">
</div>

<br />

<di="left">
<img src="./images/GSoC-Horizontal.png" alt="GSoC logo" width="400">
</div>

This project was supported and funded by Google Summer of Code 2023. For more information about Honeyscanner in GSoC2023 click here.

<br />

<di="left">
<img src="./images/blackhat_logo.png" alt="Blackhat logo" width="400">
</div>

This project was presented at BlackHat Europe 2023 in London. For more information about Honeyscanner in BlackHat Europe click here.

Honeyscanner - A analyzer for Honeypots

![Python 3.10.12]()
![Pipenv 2023.12.1]()
![GitHub license]()
![Github Issues]()

Honeyscanner is a analyzer for honeypots designed to automatically attack a gi, in order to determine if the honeypot is to specific types of cyber attacks. It uses a of attacks, ranging from exploiting software libraries to DoS, and fuzzing attacks. The analyzer then provides an e report to the honeypot administrator, offering advice on how to enhance the security of the honeypot. Targeted toward security enthusiasts, open-source communities, and companies, Honeyscanner provides a much needed safety check for honeypots.

Video showcasing Honeyscanner against Cowrie v2.5.0

<a href=" target="_blank"><img src=" alt="Honeyscanner v2.5.0"></a>

Architecture

<di="center">
<img src="./images/honeyscanner_architecture.png" alt="Honeyscanner Architecture" width="800">
</div>

References

Inspiration for Honeyscanner were the following research papers.

\[1\] Alexander , Richard Clayton: "Bitter Harvest: Systematically Fingerprinting Low- and Medium-interaction Honeypots at Internet Scale"

\[2\] Shreyas Srinivasa, Jens Myrup Pedersen, Emmanouil : "Gotta catch 'em all: a Multistage Framework for honeypot fingerprinting"

\[3\] Shreyas Srinivasa, Dimitrios Georgoulias, Jens Myrup Pedersen, Emmanouil : "A Bad IDEa: Weaponizing uncontrolled online-IDEs in a attacks"

Installation

The following instructions will guide you through the process of setting up Honeyscanner on your local machine.

Requirements

---

1. Download the Honeyscanner source code from GitHub. Open a tarminal and introduce the following command.

2. Na to the Honeyscanner's folder, install the required Python packages and activate the en.

> __NOTE FOR PIPENV__: To exit the en, you just need to enter the command "<i>exit</i>" in the terminal.

Configuration

> __NOTE__: NEVER RUN Honeyscanner AGAINST HONEYPOTS YOU DO NOT OWN, OR YOU DO NOT HA PERMISSION TO TEST.

> __NOTE__: Currently Honeyscanner can actively attack the Dionaea and the Conpot honeypots only by using the DoS attack module. The way it works is that initially Honeyscanner uses nmap to find the open ports on the targeted honeypot, then tries to DoS all ports simultaneously. In order to run the nmap scanner, run Honeyscanner with root pri for scanning Dionaea and Conpot. This provides nmap with deeper view of the services that run behind each port on the honeypot.

> __NOTE__: For Dionaea only 0.11.0 is supported at this stage of Honeyscanner. For Conpot, all up to 0.6.0 are supported.

Usage

Use the following examples as a reference for how to run Honeyscanner:

Contributors

For information on Contributors and How to contribute see our Contributors file.

The SemVer is used for . For the latest a of Honeyscanner, see page releases.

Release History

Honeyscanner does not have any release yet.

Contact

Please use Github issues to report any issues or for questions.

FAQ

In case of troubles with running python on a specific we suggest that you install the latest of anaconda from here and use Python3.10.
If you still face problems with pipen, try emptying your folder and trying again.

License

Distributed under the MIT license. See LICENSE for more information.

项目信息

开发语言：Python

Star 数：66

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Honeyscanner: A vulnerability analyzer for honeypots展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。