honeypot-setup-script

A script to install and deploy a honeypot automatically and without user interaction.

Currently installs and sets up:

• kippo
• dionaea
• p0f

These will all be installed as system services so running this script once should turn a vanilla install in to a robust honeypot. Aims to use useful and secure defaults.

Currently tested on Ubuntu 12.04

Use with caution: This script will happily and without prompt overwrite files, change the port your SSH server runs and all sorts. It is intended to be run on a vanilla install of Ubuntu 12.04. No thoughts have been made for the integrity of existing installations of softwar - so be careful!

Usage

This can script can cause damage to your system. It is meant only to be used in vanilla installed

Only run this if you know what you are doing.

wget -q https://raw.github.com/andrewmichaelsmith/honeypot-setup-script/master/setup.bash -O /tmp/setup.bash && bash /tmp/setup.bash

Effects

• Moves SSH server from port 22 to 65534
• Installs Dionaea, Kippo, p0f
• Sets up Dionaea, Kippo and p0f as system services that run on startup

Directory Structure

Logging

• Dionaea: /var/dionaea/
• Kippo: /var/kippo/
• p0f: /var/p0f/

Configuration

• Dionaea: /etc/dionaea
• Kippo: /etc/kippo

Binaries

• Dionaea: /usr/bin/dionaea
• Kippo: /opt/kippo
• p0f: /usr/sbin/p0f