Mirror of forum.nim-lang.org

6890 :: Nim Honeypot Project

• blmvxer (orginal) [2020-10-04T18:48:26+02:00] view original

  I've been working on an idea of a Telnet honeypot in Nim, When I came up with an idea of having a Modular Suite of Honeypots with Multiple environment templates for each service.

  Nim Honeypot Project Board <https://github.com/users/blmvxer/projects/1>

  Initial telnet honeypot <https://github.com/blmvxer/telnet-honey>

  If anyone would like to lend their assistance with this project it would be greatly appreciated.

---

• xendi (orginal) [2020-10-05T04:00:43+02:00] view original

  What would be extra fun: Honeypot is able to parse security CVE and produce honeypot which tricks the attacker into believing they have successfully exploited the system. This is probably easier than it sounds because there's typically a very limited number of outcomes to a given collection of exploits. Some I can think of:

  • Directory traversal (HP able to ls fake file system)
  • Shell (HP drops attacker into fake shell)
  • Auth bypass (Depends on what service it is)
  • File upload (HP accepts upload & keeps mimicking service)
  • File execution.
  • Privilege escalation (Depends on the service).

  BTW Metasploit could help in development. Would be cool if you could automate metasploit to generate new HP service definitions for Nim.

  What think you?

---

• blmvxer (orginal) [2020-10-05T18:45:32+02:00] view original

  I think that sounds like some good ideas, and I agree it would be a good feature to use metasploit, I actually have it up on my rpi4 which is where I do most of my nim development.

---