This way, you can choose from names that are common, or customize your list to for different nationalities. Rule writing is inherently a cat-and-mouse game, honeypots like this clearly give the white-hats the upper hand.Ī quick, fast and dirty solution is to simply read a random line from a text file (i.e. This can be done on a VM and you have a easily deployed, high interaction honeypot!Īside from being able to see their IP address, I think the most useful data that can be attained is their behavior what injection attacks are they using to drop the database? Write rules to prevent your honey against trivial attempts such as the ' AND 1=(SELECT attacks and see what they come up with next. This would make great honey for a honey pot just fill an SQL database with this random, realistic looking data, serve and log any and all attempts to access, query or dump the database. `StreetAddress` varchar(255) default NULL, `id` mediumint(8) unsigned NOT NULL auto_increment, I thought the concept could be really useful for certain applications and could easily envision how to implement it in C#, and make it extensible/customizable. During my research on RSA cryptography and the importance of a truly random number for having a large key-space, I stumbled on to.
0 kommentar(er)
