vlw/honeypot
1
0
Fork 0
mirror of https://codeberg.org/vlw/honeypot.git synced 2025-11-04 20:12:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
A website meant to look like a D-Link (mydlink) admin website. Pwn the pwner trying to grasp those lowest-hanging fruits on a network. Built as a demo of the Pragma web framework, and of course for my own enjoyment.
8 commits 1 branch 2 tags 813 KiB
JavaScript 45.7%
PHP 29.7%
CSS 24.4%
Hack 0.2%
Find a file
Exact
Victor Westerlund d791136abb feat: add git tracking of logs directory with logs/.gitkeep (#2) 
This is more of a follow-up for #1. Probably a good idea to add the new `.env.ini` to the gitignore too 🤦. Good thing that file is not really important (right now).

Reviewed-on: https://codeberg.org/vlw/honeypot/pulls/2
2025-09-23 22:22:52 +02:00
assets refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00
logs feat: add git tracking of logs directory with logs/.gitkeep (#2) 2025-09-23 22:22:52 +02:00
public refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00
src refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00
vegvisir@016b880682 refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00
.env.example.ini refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00
.gitignore feat: add git tracking of logs directory with logs/.gitkeep (#2) 2025-09-23 22:22:52 +02:00
.gitmodules refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00
LICENSE Initial commit 2022-11-26 18:31:26 +01:00
README.md refactor: release 2.0.0 (#1) 2025-09-23 20:09:41 +02:00

README.md

Work in progress

I'm reviving this project. The last commit was pushed over 2½ years ago at the time of writing! It was created (and not finished either) in the second generation of my web framework. A lot has changes since then and I think it would be fun to revive this project.

🍯 Honeypot

Yoink mouse clicks, mouse moves, keyboard pressed from the client, and the whole $_SERVER superglobal from the server on this website that is intentionally slow, and old-school looking to mimic the D-Link DIR-880L WiFi router's web interface. This is a typical WiFi router that you might find in a standard family home so maybe we can assume since the site isn't proxied, that someone hasn't changed the default credentials either? ;)

Logs are saved as timestamped JSON-files in the logs/ directory grouped under a subdirectory for each client using a [best-effort] client fingerprint.

Logging only starts when the sneaky starts. Interact with the fake login screen input elements, and we're off.

44302_

By the way, this project has nothing to do with D-Link specifically. The "mydlink" software apparently features both "WiFi-router" and IP-camera configuration from the same web interface - which adds additional

Installation

  1. Clone this repo

    $ git clone https://codeberg.org/vlw/honeypot

  2. Install the Vegvisir framework

    Run the Vegvisir install script

  3. Set write permission

    Make sure that the user your PHP configuration runs as has write access to the logs/ directory in this repository.