在 Kali Linux 环境下设置蜜罐
Pentbox 蜜罐 Kali Linux
Pentbox 是一个包含了许多可以使渗透测试工作变得简单流程化的工具的安全套件。它是用 Ruby 编写并且面向 GNU / Linux，同时也支持 Windows、MacOS 和其它任何安装有 Ruby 的系统。在这篇短文中我们将讲解如何在 Kali Linux 环境下设置蜜罐。如果你还不知道什么是<ruby> 蜜罐 <rp>  （ </rp> <rt>  honeypot </rt> <rp>  ） </rp></ruby>，“蜜罐是一种计算机安全机制，其设置用来发现、转移、或者以某种方式，抵消对信息系统的非授权尝试。”


![](/data/attachment/album/201609/20/112531mgnlsxt2iz2457d2.jpg)


### 下载 Pentbox：


在你的终端中简单的键入下面的命令来下载 pentbox-1.8。



```
root@kali:~# wget http://downloads.sourceforge.net/project/pentbox18realised/pentbox-1.8.tar.gz

```

![](/data/attachment/album/201609/20/112543dldhs4vaz43v5vwd.jpg)


### 解压 pentbox 文件


使用如下命令解压文件：



```
root@kali:~# tar -zxvf pentbox-1.8.tar.gz

```

![](/data/attachment/album/201609/20/112543e9kriozxxii3ox77.jpg)


### 运行 pentbox 的 ruby 脚本


改变目录到 pentbox 文件夹：



```
root@kali:~# cd pentbox-1.8/

```

![](/data/attachment/album/201609/20/112544ivlmuuzuuivsvcuh.jpg)


使用下面的命令来运行 pentbox：



```
root@kali:~# ./pentbox.rb

```

![](/data/attachment/album/201609/20/112544onoobna2b07yp0ba.jpg)


### 设置一个蜜罐


使用选项 2 (Network Tools) 然后是其中的选项 3 (Honeypot)。


![](/data/attachment/album/201609/20/112545gitojooi678ab3ad.jpg)


完成让我们执行首次测试，选择其中的选项 1 (Fast Auto Configuration)


![](/data/attachment/album/201609/20/112545aif0lzhcbozquoco.jpg)


这样就在 80 端口上开启了一个蜜罐。打开浏览器并且打开链接 <http://192.168.160.128> （这里的 192.168.160.128 是你自己的 IP 地址。）你应该会看到一个 Access denied 的报错。


![](/data/attachment/album/201609/20/112546n68j4j8ki9a02iik.jpg)


并且在你的终端应该会看到 “HONEYPOT ACTIVATED ON PORT 80” 和跟着的 “INTRUSION ATTEMPT DETECTED”。


![](/data/attachment/album/201609/20/112546aarctud3xzx3t0t3.jpg)


现在，如果你在同一步选择了选项 2 (Manual Configuration), 你应该看见更多的其它选项：


![](/data/attachment/album/201609/20/112547rvdqa35h1xdvo55f.jpg)


执行相同的步骤但是这次选择 22 端口 (SSH 端口)。接着在你家里的路由器上做一个端口转发，将外部的 22 端口转发到这台机器的 22 端口上。或者，把这个蜜罐设置在你的云端服务器的一个 VPS 上。


你将会被有如此多的机器在持续不断地扫描着 SSH 端口而震惊。 你知道你接着应该干什么么？ 你应该黑回它们去！桀桀桀！


如果视频是你的菜的话，这里有一个设置蜜罐的视频：









---


via: <https://www.blackmoreops.com/2016/05/06/setup-honeypot-in-kali-linux/>


作者：<blackmoreops.com> 译者：[wcnnbdk1](https://github.com/wcnnbdk1) 校对：[wxy](https://github.com/wxy)


本文由 [LCTT](https://github.com/LCTT/TranslateProject) 原创编译，[Linux中国](https://linux.cn/) 荣誉推出


OK
The Pentbox is a safety kit containing various tools for streamlining PenTest conducting a job easily. It is programmed in Ruby and oriented to GNU / Linux, with support for Windows, MacOS and every systems where Ruby is installed. In this small article we will explain how to set up a honeypot in Kali Linux. If you don’t know what is a honeypot, “a **honeypot** is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information systems.”

## Download Pentbox:

Simply type in the following command in your terminal to download pentbox-1.8.

root@kali:~# wget http://downloads.sourceforge.net/project/pentbox18realised/pentbox-1.8.tar.gz

## Uncompress pentbox files

Decompressing the file with the following command:

root@kali:~# tar -zxvf pentbox-1.8.tar.gz

## Run pentbox ruby script

Change directory into pentbox folder

root@kali:~# cd pentbox-1.8/

Run pentbox using the following command

root@kali:~# ./pentbox.rb

## Setup a honeypot

Use option 2 (Network Tools) and then option 3 (Honeypot).


Finally for first test, choose option 1 (Fast Auto Configuration)


This opens up a honeypot in port 80. Simply open browser and browse to http://192.168.160.128 (where 192.168.160.128 is your IP Address. You should see an Access denied error.

and in the terminal you should see “HONEYPOT ACTIVATED ON PORT 80” followed by “INTRUSION ATTEMPT DETECTED”.

Now, if you do the same steps but this time select Option 2 (Manual Configuration), you should see more extra options

Do the same steps but select port 22 this time (SSH Port). Then do a port forwarding in your home router to forward port external port 22 to this machines’ port 22. Alternatively, set it up in a VPS in your cloud server.

You’d be amazed how many bots out there scanning port SSH continuously. You know what you do then? You try to hack them back for the lulz!

Here’s a video of setting up honeypot if video is your thing:

Hmmm This is new for me to learn

Pentbox-1.8 seems to be made by a source completely independent of the genuine Pentbox 1.5… Adding to that, none of the functions listed after number 3 (Web) work… 4 shows terms, 5 exits, 6+ do nothing… This seems pretty suspicious to me considering that only the original functions from 1.5 work and everything else is bogus. I wouldn’t recommend anyone downloads this file.

I’m surprised by your definition of a honeypot. Typically a honeypot is a type of system designed to induce attacks, not deflect or counteract them.

What is the use of honeypot..

Plzz reply

Honey pot is a deliberate security loop hole. Careless attacker might hit honey pot before they hit the more important part of the system. Depend on the kindof honeypot, it can give u information about the attackers.

I want to ask what is the type of this honeypot?