vlw/honeypot
1
0
Fork 0
mirror of https://codeberg.org/vlw/honeypot.git synced 2025-11-05 04:22:43 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

doc: update README

Browse source
This commit is contained in:
Victor Westerlund 2025-09-23 20:06:28 +02:00
parent 3edfd6c164
commit b86d7bd296
1 changed files with 16 additions and 27 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
README.md
View file

@ -1,40 +1,29 @@
# Work in progress
I'm reviving this project. [The last commit was pushed over 2½ years ago](https://codeberg.org/vlw/honeypot/commit/2e4cc7e31ccc4190abfb327ecee0bdb553c3f565) at the time of writing! It was created (and not finished either) in the second generation of [my web framework](https://vegvisir.vlw.se). A lot has changes since then and I think it would be fun to revive this project.
# 🍯 Honeypot # 🍯 Honeypot
Can the IP, HTTP Headers and more from anyone trying to log in to this site. Everything entered into this page will be saved to an SQLite database. Yoink mouse clicks, mouse moves, keyboard pressed from the client, and the whole `$_SERVER` superglobal from the server on this website that is intentionally slow, and old-school looking to mimic the `D-Link DIR-880L` WiFi router's web interface. This is a typical WiFi router that you might find in a standard family home so maybe we can assume since the site isn't proxied, that someone hasn't changed the default credentials either? ;)
**Logs are saved as timestamped JSON-files in the `logs/` directory grouped under a subdirectory for each client using a [best-effort] client fingerprint.**
Logging only starts when the sneaky starts. Interact with the fake login screen input elements, and we're off.
![44302_](https://user-images.githubusercontent.com/35688133/204114986-123a5a9a-c164-49c4-a837-43d8c6f7ba45.png) ![44302_](https://user-images.githubusercontent.com/35688133/204114986-123a5a9a-c164-49c4-a837-43d8c6f7ba45.png)
> **Note** This project is not related to D-Link in any form or fashion. I just chose their mydlink portal as it features both IP camera and WiFi router controls from the same interface, which I intend to implement fun dummies of in the future. By the way, this project has nothing to do with D-Link specifically. The "mydlink" software apparently features both "WiFi-router" and IP-camera configuration from the same web interface - which adds additional
## Installation ## Installation
1. **Install Pragma** 1. **Clone this repo**
This website is built on the [Pragma web framwork](https://github.com/VictorWesterlund/pragma), and is meant as a showcase of some of it's features.
[**Install the Pragma framwork**](https://github.com/VictorWesterlund/pragma)
2. **Clone this repo**
Clone this repo (with submodules) anywhere Pragma can read its contents.
``` ```
$ git clone http://github.com/VictorWesterlund/honeypot --recurse-submodules $ git clone https://codeberg.org/vlw/honeypot
``` ```
3. **Set env var** 2. **Install the [Vegvisir](https://vegvisir.vlw.se) framework**
Make a copy of the `.env.example.ini` file [**Run the Vegvisir install script**](https://codeberg.org/vegvisir/install#get-started)
``` 3. **Set write permission**
$ cp -p .env.example.ini .env.ini
```
and set the `DB_POT` variable to an absolute path to the SQLite database to create Make sure that the user your PHP configuration runs as has write access to the `logs/` directory in this repository.
```ini
DB_POT="/home/me/pot.sql"
````
## Data saved
The database will dump the contents of `$_POST` and `$_SERVER` into a JSON string along with the timestamp since Unix epoch the request was received.