Cyber security

Honeypots Detection – Using Nuclei Templates For Effective Detection

Nuclei templates for honeypots detection.

This repository contains Nuclei templates to detect several well-known open-source honeypots, such as: ADBHoney, Conpot, Cowrie, Dionaea (multiple services), ElasticPot, Mailoney, Redis Honeypot, Snare, among others.

Usage

  1. Install Nuclei.
  2. Clone this repository:
    git clone https://github.com/UnaPibaGeek/honeypots-detection.git
  3. Move into the templates folder:
    cd honeypots-detection/templates
  4. Run the desired template as follows:
    sudo nuclei -u {target_IP} -t ./{template_name}.yaml

Example

For a more detailed output it is possible to use the -debug-resp parameter:

The requests will be sent to the honeypot’s default port if not specified.

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

How Web Application Firewalls (WAFs) Work

General Working of a Web Application Firewall (WAF) A Web Application Firewall (WAF) acts as…

4 days ago

How to Send POST Requests Using curl in Linux

How to Send POST Requests Using curl in Linux If you work with APIs, servers,…

4 days ago

What Does chmod 777 Mean in Linux

If you are a Linux user, you have probably seen commands like chmod 777 while…

4 days ago

How to Undo and Redo in Vim or Vi

Vim and Vi are among the most powerful text editors in the Linux world. They…

4 days ago

How to Unzip and Extract Files in Linux

Working with compressed files is a common task for any Linux user. Whether you are…

4 days ago

Free Email Lookup Tools and Reverse Email Search Resources

In the digital era, an email address can reveal much more than just a contact…

4 days ago