honeypot-setup-script

A script to install and deploy a honeypot automatically and without user interaction.

Currently installs and sets up:

• kippo
• dionaea
• p0f

These will all be installed as system services so running this script once should turn a vanilla install in to a robust honeypot. Aims to use useful and secure defaults.

Currently tested on Ubuntu 12.04

Use with caution: This script will happily and without prompt overwrite files, change the port your SSH server runs and all sorts. It is intended to be run on a vanilla install of Ubuntu 12.04. No thoughts have been made for the integrity of existing installations of softwar - so be careful!

Usage

This can script can cause damage to your system. It is meant only to be used on a vanilla installation

Only run this if you know what you are doing.

wget -q https://raw.github.com/andrewmichaelsmith/honeypot-setup-script/master/setup.bash -O /tmp/setup.bash && bash /tmp/setup.bash

Effects

• Moves SSH server from port 22 to 65534
• Installs Dionaea, Kippo, p0f
• Sets up Dionaea, Kippo and p0f as system services that run on startup

Directory Structure

Logging

• Dionaea: /var/dionaea/
• Kippo: /var/kippo/
• p0f: /var/p0f/

Configuration

• Dionaea: /etc/dionaea
• Kippo: /etc/kippo

Binaries

• Dionaea: /usr/bin/dionaea
• Kippo: /opt/kippo
• p0f: /usr/sbin/p0f