Dionaea - Setting up a Honeypot environment (Part 2)

1. Introduction In the previous post, we configured an SSH honeypot using Cowrie. In this tutorial, I will go through the installation and configuration process for a honeypot application named Dionaea. While Cowrie is a Honeypot designed to record traffic related to SSH and Telnet, Dionaea focuses on capturing malware. Dionaea does this by emulating…

Cowrie - Setting up a Honeypot environment (Part 1)

1. Introduction A Honeypots function could be considered consistent with its name, it is designed to attract malicious traffic, it does this by emulating services that would be considered valuable for malicious attackers. When a bad actor tries to establish a connection with the service running on the honeypot, the connection will be logged and made available for…

Install and configure ClamAV on Ubuntu

Objective Install and configure ClamAV to scan for viruses on a local machine Distributions The distribution in this walkthrough will be based on Ubuntu 16.04, there shouldn't however be any issues with new distributions. Introductions Compared to an operating system like Windows, malicious software isn't all that common - they do however exist. Very often,…