4 ms·
I've already built it and I am finalizing website copy, static pages, etc before launching. I built network 'canaries', for lack of a better word, that do a co
by ejcx 11y ago
I've already built it and I am finalizing website copy, static pages, etc before launching.
I built network 'canaries', for lack of a better word, that do a couple things.
1) They emulate popular services, Web Server, FTP Server, MySQL server.
2) They provide you with information and alert you when other machines talk to it (for example, it will give you information from a POST request on a page that has a password field).
They are essentially network trapdoors that let you find people doing things they shouldn't on your network and are all precompiled ELFs, which make deployment super easy.
I want this to provide me with real revenue (my 2016 goal). If you have input for me please let me know what you think.
- needcaffeine 11y agoI love this! Is there any way I can follow your work/progress?
- ejcx 11y agoHey I really appreciate the interest. If you email the email address in my profile I'll make sure to get you set up for free when I'm set up in the next month. The same "email for free access" offer goes for anyone else who is interested as well. Please email me and I would be glad to get you set up with an account.
- jwcrux 11y agoI'd be interested in hearing more about it and how it compares to other established honeypots (e.g. Kippo). Is there a place I can go now to learn more?
- ejcx 11y agoI have a logging and alerting aspect with email/SMS, as well as way more types of services than just SSH. Mine are also easily hackable from a developer standpoint. People who buy it can easily add new alerting and logging servers of their own.
- amirmc 11y agoCongrats! This is quite interesting and I look forward to seeing the site. Have you come across CyberChaff [1]? It seems like you may have similar goals. CyberChaff makes use of HaLVM [2] so this approach (using unikernels) seems like it might suit you too. I've put together a website to help gather the unikernel projects [3], so if you choose to consider this approach for your next round of work, please do share your experiences there! [1] https://galois.com/project/cyberchaff/ https://galois.com/project/cyberchaff/ [2] https://github.com/GaloisInc/HaLVM https://github.com/GaloisInc/HaLVM [3] http://unikernel.org http://unikernel.org
- ejcx 11y agoThanks a lot. I'm familiar with those projects and while v1 of my project doesn't use it it would be amazing to use it for the higher interaction canaries/honeypots I build.