Skip to content

This repository contains a simple honeypot written in Python that will be deployed through Docker on Raspberry Pi.

License

Notifications You must be signed in to change notification settings

ResearcherOne/iot-honeypot

Repository files navigation

IoT Honeypot

This repository contains a simple honeypot written in Python that will be deployed through Docker on Raspberry Pi. This is a proof of concept code and should not be used in production environments. You can find my related talk in Turkish in the following link https://www.youtube.com/watch?v=PKCdJzwtpEA

Python Saati Talk.

Prerequisities for running pure Python script

  • echo "Follow these steps only if you do not want to proceed with Docker."
  • sudo apt install python3-pip -y
  • sudo pip3 install virtualenv
  • virtualenv -p python3 venv
  • source venv/bin/activate
  • pip3 install sendgrid
  • export SENDGRID_API_KEY="your-top-secret-sendgrid-api-key" && export HONEY_FROM_MAIL="[email protected]" && export HONEY_TO_MAIL="email_address@to_be_alerted.com"
  • sudo -E python3 ftp-honeypot.py

Prerequisities

Dockerization of the Python application

  • cd src
  • sudo docker build -t ftp-honeypot .
  • sudo docker run -p 21:21 -e "SENDGRID_API_KEY=your-top-secret-sendgrid-api-key" -e "HONEY_FROM_MAIL=[email protected]" -e "HONEY_TO_MAIL=[email protected]" ftp-honeypot
  • echo "exit from the application once you done with testing your image and proceed with the docker pirates"

Running Docker Image on Raspberry Pi with Docker Pirates

  • install docker pirates
  • configure wifi.yml
  • flash the image with wifi config
  • ssh [email protected]
  • git clone this-repository
  • cd src
  • sudo docker build -t ftp-honeypot .
  • sudo docker run -p 21:21 -e "SENDGRID_API_KEY=your-top-secret-sendgrid-api-key" -e "HONEY_FROM_MAIL=[email protected]" -e "HONEY_TO_MAIL=email_address@to_be_alerted.com" dockerhub-username/ftp-honeypot

Testing the setup

  • echo "find target host. This should also trigger alerts."
  • nmap 192.168.1.0/24
  • echo "connect to the ftp service"
  • ftp targetip
  • check out the email you used in "docker run" command. You should've receveid an email.

Credits

About

This repository contains a simple honeypot written in Python that will be deployed through Docker on Raspberry Pi.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published