honeypot/README.md
2025-09-23 20:06:28 +02:00

29 lines
No EOL
1.8 KiB
Markdown

# Work in progress
I'm reviving this project. [The last commit was pushed over 2½ years ago](https://codeberg.org/vlw/honeypot/commit/2e4cc7e31ccc4190abfb327ecee0bdb553c3f565) at the time of writing! It was created (and not finished either) in the second generation of [my web framework](https://vegvisir.vlw.se). A lot has changes since then and I think it would be fun to revive this project.
# 🍯 Honeypot
Yoink mouse clicks, mouse moves, keyboard pressed from the client, and the whole `$_SERVER` superglobal from the server on this website that is intentionally slow, and old-school looking to mimic the `D-Link DIR-880L` WiFi router's web interface. This is a typical WiFi router that you might find in a standard family home so maybe we can assume since the site isn't proxied, that someone hasn't changed the default credentials either? ;)
**Logs are saved as timestamped JSON-files in the `logs/` directory grouped under a subdirectory for each client using a [best-effort] client fingerprint.**
Logging only starts when the sneaky starts. Interact with the fake login screen input elements, and we're off.
![44302_](https://user-images.githubusercontent.com/35688133/204114986-123a5a9a-c164-49c4-a837-43d8c6f7ba45.png)
By the way, this project has nothing to do with D-Link specifically. The "mydlink" software apparently features both "WiFi-router" and IP-camera configuration from the same web interface - which adds additional
## Installation
1. **Clone this repo**
```
$ git clone https://codeberg.org/vlw/honeypot
```
2. **Install the [Vegvisir](https://vegvisir.vlw.se) framework**
[**Run the Vegvisir install script**](https://codeberg.org/vegvisir/install#get-started)
3. **Set write permission**
Make sure that the user your PHP configuration runs as has write access to the `logs/` directory in this repository.