One Article Review
| Source |  SANS Institute |
|---|---|
| Identifiant | 1641 |
| Date de publication | 2016-05-15 00:17:18 (vue: 2016-05-15 00:17:18) |
| Titre | INetSim as a Basic Honeypot, (Sat, May 14th) |
| Texte | First, INetSim is a software suite for simulating common internet services in a lab environment, e.g. for analyzing the network behavior of unknown malware samples.[1] There are several popular honeypot out there (Kippo, Honeyd, etc) but I wanted something simple and lightweight and decided to use INetSim to capture some of the traffic hitting my network on a regular basis.The first step is to check the requirements for INetSim which might require some Perl packages if your installation doesn https://nmap.org/book/nse.html) WinHttp.WinHttpRequest.5)User-Agent: masscan/1.0 (https://github.com/robertdavidgraham/masscan)User-Agent: ZmEuUser-Agent: netscanUser-Agent: Go http packageUser-Agent: shellshock-scanUser-Agent: CSS Certificate Spider (http://www.css-security.com/certificatespider/)User-Agent: Netcraft SSL Server Survey - contact info@netcraft.com[1] http://www.inetsim.org/index.html[2] http://www.inetsim.org/requirements.html[3] http://www.inetsim.org/downloads.html[4] https://github.com/FEDEVEL/imx6rex-linux-3.10.17/blob/master/Documentation/ABI/removed/ip_queue-----------Guy Bruneau IPSS Inc.Twitter: GuyBruneaugbruneau at isc dot sans dot edu (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. |
| Envoyé | Oui |
| Condensat | 14th 17/blob/master/documentation/abi/removed/ip agent: analyzing are attribution basic basis behavior bruneau but capture center certificate check com com/certificatespider/ com/fedevel/imx6rex com/robertdavidgraham/masscan common commons contact creative css decided doesn dot edu environment etc first guy guybruneaugbruneau hitting honeyd honeypot html http http://www https://github https://isc https://nmap inc inetsim info@netcraft installation internet ipss isc kippo lab license lightweight linux malware masscan/1 may might netcraft netscanuser network noncommercial org/book/nse org/downloads org/index org/requirements out packages packageuser perl popular queue regular require requirements samples sans sat scanuser security server services several shellshock simple simulating software some something spider ssl states step storm suite survey traffic twitter: united unknown use user wanted which winhttp winhttprequest your zmeuuser |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.