HoneyCreds : Network Credential Injection To Detect Responder And Other Network Poisoners

HoneyCreds network credential injection to detect responder and other network poisoners.

Requirements

Requires Python 3.6+ (tested on Python 3.9)
smbprotocol
cffi
splunk-sdk

Installation

git clone https://github.com/Ben0xA/HoneyCreds.git
cd HoneyCreds
pip3 install -r requirements.txt

Running

python3 honeycreds.py

Settings

It is advised that you change these settings to best suit your environment.

Note: You can use an existing account, just change the password.

Change these in honeycreds.conf

Choose a legit looking username

def_username = ‘honeycreds’

This can match your current Short Domain

def_domain = ‘XQQX’

Make this whatever you want. Note: HTTP requests will send this in plaintext

def_password = ‘This is a honey cred account.’

The FQDN. Leave .local at the end.

def_fqdn = ‘xqqx.local’

The hostname that DOES NOT EXIST but looks legit.

def_hostname = ‘HNECRD01’

The log file and location

def_logfile = ‘honeycreds.log’

Ability to turn SMB or HTTP on or off. Set to “OFF” to turn off.

SMB = ‘ON’
HTTP = ‘ON’

The time to pause in seconds between requests.

SMB_SLEEP = 5
HTTP_SLEEP = 12

R K

Recent Posts

Admin Panel Dorks : A Complete List of Google Dorks

Introduction Google Dorking is a technique where advanced search operators are used to uncover information…

1 day ago

Log Analysis Fundamentals

Introduction In cybersecurity and IT operations, logging fundamentals form the backbone of monitoring, forensics, and…

2 days ago

Networking Devices 101: Understanding Routers, Switches, Hubs, and More

What is Networking? Networking brings together devices like computers, servers, routers, and switches so they…

3 days ago

Sock Puppets in OSINT: How to Build and Use Research Accounts

Introduction In the world of Open Source Intelligence (OSINT), anonymity and operational security (OPSEC) are…

3 days ago

What is SIEM? Complete Guide to Security Information and Event Management

Introduction As cyber threats grow more sophisticated, organizations need more than just firewalls and antivirus…

3 days ago

Website OSINT: Tools and Techniques for Reconnaissance

Introduction When it comes to cybersecurity and ethical hacking, one of the most effective ways…

4 days ago