Slashdot Mirror


Fun Things To Do With Your Honeypot System

An anonymous reader writes "Whitedust is running an interesting article on honeypots and their uses. From the article: 'Most papers deal with the potential gains a honeypot can give you, and the proper way to monitor a honeypot. Not very many of them deal with the honeypots themselves... Honeypots can be used to ensnare and beguile potential hackers; entice them to give you more research information, and actively defend your production network."" From the article: "Once an attacker has taken all the trouble to set up shop on your honeypot, he'll probably want to see what else there is to play with. If your honeypot is like most traditional honeypots, there's not much for an attacker to do once he gets in. What you really want if for the attacker to transfer down all the other toys in his arsenal so you can have a copy as well. Giving an attacker additional targets with various operating systems and services can help him decide to give you his toys. The targets can be real, but you'll get almost as much mileage if they're simulated. A good place to start is to put a phantom private network up hung off the back of the honeypot."

14 of 136 comments (clear)

  1. Re:Think you missed the point... by heinousjay · · Score: 5, Funny

    Why don't you just secure your network and you don't have to worry about it

    Oh, is that all? Good to see you've boiled network security down to a single step. I'd say write a book, but it would only have one page so that's probably a waste of your time.

    --
    Slashdot - where whining about luck is the new way to make the world you want.
  2. Re:And a fun way to get free warze. by quonsar · · Score: 1, Funny
    Thou shall not use an programming language that works on only one OS.

    Thou shall not program computers in any language until having mastered the one you speak and write in.

  3. NASA by wootest · · Score: 3, Funny
  4. a fake shell by Per+Wigren · · Score: 4, Funny
    Something funnier (IMHO) would be to write a simple wrapper over the shell which gives crazy error messages and other things:
    root@honeypot:~# whoami
    I have no idea.
    root@honeypot:~# ls
    PRESS PLAY ON TAPE
    root@honeypot:~#
    and so on... :)
    --
    My other account has a 3-digit UID.
    1. Re:a fake shell by TheRaven64 · · Score: 2, Funny

      On a network I used to admin, I added a companion of the well known 'whoami' command; a 'whereami' command, which always replied 'You're in the village.'

      --
      I am TheRaven on Soylent News
  5. Most people.. by dubbreak · · Score: 5, Funny

    Most people use their honey pots for surfing the web, checking email and sometimes playing games.

    --
    "If you are going through hell, keep going." - Winston Churchill
  6. Honey can lead to infant botulism by itismike · · Score: 5, Funny

    Sorry to do this, but I think that it is somewhat careless to assume that all new parents that might be reading Slashdot are in fact aware of the unique danger that honey presents to infants. Just in case someone comes across this and isn't aware, please look into the concerns related to infant botulism before getting the bright idea to feed your newborn some honey. Now go ahead and make the jokes - I just think that this needed to be said.

  7. Re:Idiot by Anonymous Coward · · Score: 3, Funny

    Do you have so much time on your hands that you find it amusing to prattle on about common spelling errors? Or does it some how make you feel superior to spot a misused "an" and point it out to the whole world as is "see, this person is an idiot, whereas I am a superior human!". Good lord, get a life.

    Errors:
    1. "Somehow" is one word.
    2. as is "see, this person is an idiot As is?
    3. a superior human!". With the type of English that one uses in the U.S., sentence-ending punctuation is usually contained within the quotation marks and one doesn't usually use two of them in one sentence.
    4. Good lord Generally, "Lord"--when used in this context--is capitalized.

    Damn, it's great to have so much time on my hands so I can feel so superior!

  8. pr0n by Khashishi · · Score: 3, Funny

    Just fill the honeypot with pr0n and there will be plenty for the hacker to play with.

  9. Re:What is Honeypot by masterzora · · Score: 2, Funny

    The difference is that here he's just karma whoring whereas on Digg they would genuinely need such an explanation.

    --
    Remember, open source is free as in speech, not free as in bear.
  10. Fun things to put on honeypots by Animats · · Score: 4, Funny
    • Call up a venture capitalist friend and ask for some rejected business plans for really stupid business ideas. Put them on your honeypot.
    • Get some publicly available geophysical data for real oil wells, and change all the locations to somewhere else with comparable geology but no oil.
    • Get some rejected porno images from people in the industry. Buy the reproduction rights. Put Digimarc watermarks on them. Wait for them to reappear elsewhere. Sue. Profit.
  11. Consider how this one looks to a visiting non-Geek by umbrellasd · · Score: 4, Funny
    "Fun Things To Do With Your Honeypot System"

    non-Geek: "Is this a sexual reference? I don't get it...are they talking about that weird cyber thing?"

  12. Re:And a fun way to get free warze. by NormalVisual · · Score: 4, Funny

    That reminds me of a joke I heard years ago:

    A new Harvard freshman was lost and looking for the library. He approached what obviously was an upperclassman, and asked "Excuse me, could you please tell me where the library is at?" The upperclassman looked down his nose at the freshman, and replied, "My good sir, here at Harvard we do *not* end our sentences with a preposition." The freshman is a bit taken aback, and rephrases his question: "Okay, could you please tell me where the library is at, asshole?"

    There aren't too many grammar jokes out there, so I guess you have to take them as you can get them.

    --
    Please stand clear of the doors, por favor mantenganse alejado de las puertas
  13. Re:Consider how this one looks to a visiting non-G by Lissajous · · Score: 2, Funny

    A visiting what? C'mon - I mean seriously.....this *is* slashdot!