60 lines
2.0 KiB
Markdown
60 lines
2.0 KiB
Markdown
# HellPot
|
|
[](https://godoc.org/github.com/yunginnanet/HellPot) [](https://goreportcard.com/report/github.com/yunginnanet/HellPot)
|
|
|
|
HellPot is an endless honeypot that sends bots to hell. Based on [Heffalump](https://github.com/carlmjohnson/heffalump).
|
|
|
|
It finishes the work of Heffalump with a few improvements and the addition of a [toml configuration file](https://github.com/spf13/viper) and [JSON logging](https://github.com/rs/zerolog). It is built off of [CokePlate](https://git.tcp.direct/kayos/CokePlate).
|
|
|
|
|
|
The source of the honeypot data is [The Birth of Tragedy (Hellenism and Pessimism)](https://www.gutenberg.org/files/51356/51356-h/51356-h.htm) by Friedrich Nietzsche
|
|
|
|

|
|
|
|
Live example: <a href="https://vx-underground.org/wp-login.php" rel="nofollow">Do not follow this link.</a> It will flood your browser's memory and likely cause a crash.
|
|
|
|
## Example Web Server Config (nginx)
|
|
|
|
```
|
|
location '/robots.txt' {
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_pass http://127.0.0.1:8080$request_uri;
|
|
}
|
|
|
|
location '/wp-login.php' {
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_pass http://127.0.0.1:8080$request_uri;
|
|
}
|
|
```
|
|
|
|
|
|
## Example Program Config (toml)
|
|
|
|
If the configuration file is missing, the default settings will automatically drop itself in the current working directory as `config.toml`.
|
|
|
|
```
|
|
[diception]
|
|
server_name = "nginx"
|
|
|
|
[http]
|
|
bind_addr = "127.0.0.1"
|
|
bind_port = "8080"
|
|
paths = ["wp-login.php","wp-login"]
|
|
unix_socket = "/var/run/hellpot"
|
|
use_unix_socket = false
|
|
|
|
[logger]
|
|
debug = true
|
|
directory = "/home/kayos/.config/HellPot/logs/"
|
|
nocolor = false
|
|
use_date_filename = true
|
|
|
|
[performance]
|
|
# max_workers is only valid if restrict_concurrency is true
|
|
restrict_concurrency = false
|
|
max_workers = 256
|
|
|
|
```
|
|
|