1. Assignment 3: Questions, challenges, and programs demonstrating the following
Honeyd
Build it
Create a script/program to simulate one
Integrate it with honeyd
Create a configuration
Include a router personality
Include multiple host personalities running various OSes
Run it
Hint: You can run it on the loopback interface
Use Nmap to scan the simulated network
Collect a network trace of the data received by the honeypot
Metasploit
Download and run
Launch an attack against one of the simulated services
Compare the logs generated by the service and the network dump
Can you run honeyd on your real network interface?
Listen on some unused ports (e.g., sshd, ftpd, SMTP, if you are not using them)
Advertise your “honey”-service on the Internet
Capture data hitting your service, anything interesting?
Where did the connections come from?
What usernames/passwords did the attacker try?
Other honeypots
Nepenethes,
Mwcollect,
Other data collection tools
Sebek,