HPotter is a honney pot implementation that creates disposible containers upon each connection to the pot. The associated payloads sent to the honeypot are optionally stored to a local database for further inspection and analysis. Additionally, the honey pot is configurable to run multiple services and protocols by specifying the container image to run in a config.yaml file as shown below:
Click to expand example config...
services:
# HTTPd service - automatically runs on port 8080/tcp
- service: "httpd"
listen_address: "0.0.0.0" # optional, defaults to localhost (127.0.0.1)
request_save: true
collect_credentials: true
# TLS options (optional, only for httpd service)
use_tls: true
certificate_path: "/path/to/certificate.crt"
key_path: "/path/to/private.key"
# OR generate self-signed certificates automatically
# generate_certs: true
# SSH service - automatically runs on port 2222/tcp
- service: "ssh"
request_save: true
collect_credentials: true
command_limit: 10 # optional, defaults to 10 for ssh/telnet
# Telnet service - automatically runs on port 2223/tcp
- service: "telnet"
request_save: true
collect_credentials: true
command_limit: 15 # optional, defaults to 10 for ssh/telnet
# Required environment variables are automatically added
db_config:
db_type: "postgres"
user: "your_db_user"
password: "your_db_password"
frontend:
enabled: true
port: 80
listen_address: "127.0.0.1"