低交互蜜罐
优质
小牛编辑
131浏览
2023-12-01
This conatains the low interaction honeypot.
Steps to deploy
Import iRules
Login into the TMUI, Import the Honeypot iRules: https://www.xnip.cn/doc/yC3QNYt1TJhoneypot_http.tcl, https://www.xnip.cn/doc/yC3QNYt1TJhoneypot_tcp.tcl, https://www.xnip.cn/doc/yC3QNYt1TJhoneypot_udp.tcl.
Execute the following commands to show all imported honeypot irules
tmsh show ltm rule honeypot_*
Prepare Ips and vlan
Put all honeypot used IPs and vlan mapping to a file, each line has one map, below is a example.
Example$ echo "10.1.10.35|36|37 vlan01" >> test.1
$ echo "10.1.10.45|46 vlan02" >> test.1
$ cat test.1
10.1.10.35|36|37 vlan01
10.1.10.45|46 vlan02
Note | 10.1.10.35|36|37 vlan01 means in valn01 there has 3 ips(10.1.10.35, 10.1.10.36, 10.1.10.37) are usede by honenypot. |
Generate Honeypot initial bash scripts
This section use a tools to generate honeypot initial bash scripts.
Refer to 链接 for more details.