当前位置: 首页 > 文档资料 > Cloudadc 帮助文档 >

低交互蜜罐

优质
小牛编辑
131浏览
2023-12-01

This conatains the low interaction honeypot.

Steps to deploy

Import iRules

Login into the TMUI, Import the Honeypot iRules: https://www.xnip.cn/doc/yC3QNYt1TJhoneypot_http.tcl, https://www.xnip.cn/doc/yC3QNYt1TJhoneypot_tcp.tcl, https://www.xnip.cn/doc/yC3QNYt1TJhoneypot_udp.tcl.

Execute the following commands to show all imported honeypot irules

tmsh show ltm rule honeypot_*

Prepare Ips and vlan

Put all honeypot used IPs and vlan mapping to a file, each line has one map, below is a example.

Example
$ echo "10.1.10.35|36|37 vlan01" >> test.1
$ echo "10.1.10.45|46 vlan02" >> test.1

$ cat test.1
10.1.10.35|36|37 vlan01
10.1.10.45|46 vlan02
Note10.1.10.35|36|37 vlan01 means in valn01 there has 3 ips(10.1.10.35, 10.1.10.36, 10.1.10.37) are usede by honenypot.

Generate Honeypot initial bash scripts

This section use a tools to generate honeypot initial bash scripts.

Refer to 链接 for more details.