Home

Welcome to the HoneyPy wiki!

Plugins

• DnsUdp
• Medium interaction - udp - Responds to DNS queries with a random ip address.
• Echo
• Low interaction - tcp - Echos back data sent by a connected clients.
• Echo_udp
• Low interaction - udp - Echos back data sent by a connected clients.
• HashCountRandom
• Low interaction - tcp - For each instance of data sent by a connected client it increments a counter and returns a md5 hash of the count and some random data.
• MOTD
• Low interaction - tcp - For each instance of data sent by a connected client it returns the message specified in the data variable.
• MOTD_udp
• Low interaction - udp - For each instance of data sent by a connected client it returns the message specified in the data variable.
• NtpUdp
• Low interaction - udp - Accepts NTP requests, returns a packet with the current system time.
• Random
• Low interaction - tcp - For each instance of data sent by a connected client it returns some random data.
• SmtpExim
• Medium interaction - tcp - Emulates an Exim SMTP server. Provides interaction with a subset of commands.
• TelnetDebian7
• Medium interaction - tcp - Emulates a Debian Telnet service login prompt. Allows logins and provides a limited set of commands. (note: you should use the TelnetUnix plugin instead, this plugin should eventually go away)
• TelnetUnix
• Medium interaction - tcp - Emulates a Telnet service. Better Telnet emulation with Twisted library. Provides a broader set of commands using clilib (https://github.com/foospidy/clilib).
• TelnetWindows
• Medium interaction - tcp - Emulates a Windows Telnet service login prompt. Allows logins and provides a limited set of commands.
• Web
• Low interaction - tcp - A very simple web service that responds to any request with a 200 OK response code.

Loggers

• Log file
• Twitter
• HoneyDB
• Slack
• Logstash
• Elasticsearch

Mentions

Thanks to the ISC StormCast for mentioning HoneyPy, https://isc.sans.edu/podcastdetail.html?id=4755.