{"id":7873,"date":"2014-08-09T10:27:33","date_gmt":"2014-08-09T13:27:33","guid":{"rendered":"http:\/\/www.ethicalhacker.com.br\/site\/?p=7873"},"modified":"2019-06-18T17:48:50","modified_gmt":"2019-06-18T20:48:50","slug":"honeydrive-3","status":"publish","type":"post","link":"https:\/\/www.ethicalhacker.com.br\/site\/2014\/08\/basico\/honeydrive-3\/","title":{"rendered":"HoneyDrive 3"},"content":{"rendered":"

Ol\u00e1 pessoal !!! Bem vindo ao site Ethical Hacker !!!<\/p>\n

O HoneyDrive<\/span> \u00e9 uma\u00a0<\/span> distro<\/span><\/span> Linux<\/span><\/span> honeypot<\/span>. \u00c9<\/span> um dispositivo virtual <\/span>em Open Virtualization Alliance <\/span><\/span>(OVA<\/span>), atrav\u00e9s da edi\u00e7\u00e3o<\/span> desktop<\/span> Xubuntu<\/span> 12.04.4<\/span> LTS<\/span> instalada.<\/span> Ele cont\u00e9m mais de<\/span> 10<\/span> pacotes de software<\/span> de honeypot<\/span> pr\u00e9-instalados<\/span> e<\/span> pr\u00e9-configurados<\/span>, como Kippo<\/span> SSH<\/span> honeypot<\/span>, Dionaea<\/span> e<\/span> Amun<\/span> honeypots<\/span> de malware<\/span>, Honeyd de\u00a0<\/span> baixa<\/span> intera\u00e7\u00e3o<\/span> honeypot<\/span>, Glastopf<\/span> web<\/span> honeypot<\/span> e<\/span> Wordpot<\/span>, Conpot<\/span> SCADA<\/span> \/<\/span> ICS<\/span> honeypot<\/span>, Thug<\/span> e<\/span> PhoneyC<\/span> honeyclients<\/span>, etc.<\/span> Al\u00e9m disso, ele<\/span> inclui<\/span> muitos scripts<\/span> e utilit\u00e1rios<\/span> pr\u00e9-configurados e<\/span> \u00fateis<\/span> para analisar,<\/span> visualizar e<\/span> processar<\/span> os dados que ele<\/span> pode capturar<\/span>, como Kippo<\/span>-Graph, Honeyd<\/span>–<\/span>Viz, DionaeaFR<\/span>, uma<\/span> pilha<\/span> ELK<\/span> e muito mais.<\/span> Por \u00faltimo<\/span>, quase 90 an\u00e1lises de malware<\/span> conhecido<\/span>, ci\u00eancia forense e<\/span> ferramentas de monitoramento<\/span> de rede relacionados,<\/span> tamb\u00e9m est\u00e3o presentes<\/span> na distribui\u00e7\u00e3o.<\/span><\/span><\/span><\/p>\n


\nSeguinte Caracter\u00edsticas:<\/span><\/span><\/p>\n

Appliance<\/span> virtual<\/span> baseado no<\/span> Desktop<\/span><\/span> Xubuntu<\/span> 12.04.4<\/span> LTS<\/span> .<\/span>
\nDistribu\u00eddo<\/span> como um arquivo \u00fanico<\/span> OVA<\/span>, pronto para ser importado.<\/span>
\nLAMP<\/span> completo instalado<\/span> (<\/span>Apache 2, MySQL 5<\/span>), al\u00e9m de ferramentas como<\/span> phpMyAdmin<\/span>.
\nKippo<\/span> SSH<\/span> honeypot<\/span>, mais Kippo<\/span>-Graph, Kippo<\/span>-Malware, Kippo2MySQL<\/span> e<\/span> outros scripts<\/span> \u00fateis.<\/span>
\nDionaea<\/span> honeypot<\/span> malware,<\/span> al\u00e9m de<\/span> DionaeaFR<\/span> e<\/span> outros scripts<\/span> \u00fateis.<\/span>
\nAmun<\/span> honeypot<\/span> malware,<\/span> al\u00e9m de<\/span> scripts \u00fateis<\/span>.
\nHoneypot<\/span> web<\/span> Glastopf<\/span>, junto com Wordpot<\/span> WordPress<\/span> honeypot<\/span>.
\nConpot<\/span> SCADA<\/span> \/<\/span> ICS<\/span> honeypot<\/span>.
\nHoneyd<\/span> de baixa<\/span> intera\u00e7\u00e3o<\/span> honeypot<\/span>, mais Honeyd2MySQL<\/span>, Honeyd<\/span>–<\/span>Viz e<\/span> outros scripts<\/span> \u00fateis.<\/span>
\nLaBrea<\/span> honeypot<\/span> pegajoso,<\/span> Honeypot<\/span> min\u00fasculo<\/span>, o IIS Emulator<\/span> e<\/span> INetSim<\/span>.
\nThug<\/span> e<\/span> PhoneyC<\/span> honeyclients<\/span> para an\u00e1lise de<\/span> ataques<\/span> do lado do cliente<\/span>, juntamente com Maltrieve<\/span> coletor de<\/span> malware.<\/span>
\nELK<\/span> empilhar:<\/span> ElasticSearch<\/span>, Logstash<\/span>, Kibana<\/span> para<\/span> an\u00e1lise do registro<\/span> e visualiza\u00e7\u00e3o.<\/span><\/p>\n


\nUm<\/span> pacote completo de<\/span> seguran\u00e7a<\/span>, forense e ferramentas<\/span> anti-<\/span>malware para monitoramento de rede,<\/span> shellcode<\/span> malicioso<\/span> e an\u00e1lise de<\/span> PDF<\/span>, como o ntop<\/span>, p0f<\/span>, EtherApe<\/span>, nmap<\/span>, DFF<\/span>, Wireshark<\/span>, Recon<\/span>-ng, ClamAV<\/span>, ettercap<\/span>, mastiff, Automater<\/span>, UPX<\/span>, pdftk<\/span>, Flasm<\/span>, Yara<\/span>, Viper<\/span>, pdf-parser, Pyew<\/span>, Radare2<\/span>, dex2jar<\/span> e muito mais.<\/span> Firefox<\/span> Add-<\/span>ons software<\/span> pr\u00e9-<\/span>instalado, al\u00e9m de<\/span> software extra<\/span> \u00fateis, como<\/span> o GParted<\/span> <\/span><\/span>, Terminator<\/span>, Adminer<\/span>, VYM<\/span>, Xpdf<\/span> e muito mais.<\/span> <\/span><\/p>\n

Agumas considera\u00e7\u00f5es do HoneyDrive<\/span> 3:<\/span><\/p>\n

1)<\/span> HoneyDrive<\/span> 3 foi<\/span> criado<\/span> a partir do zero<\/span>. Baseia-se na<\/span> edi\u00e7\u00e3o<\/span> desktop<\/span><\/span> Xubuntu<\/span> 12.04.4<\/span> LTS<\/span> e \u00e9<\/span> distribu\u00eddo como um arquivo<\/span> OVA<\/span> aut\u00f4nomo, que pode<\/span> ser facilmente importado<\/span> como uma m\u00e1quina virtual<\/span> usando o software<\/span> de virtualiza\u00e7\u00e3o como o<\/span> VirtualBox<\/span> e<\/span> VMware<\/span>. <\/span><\/p>\n


\n2)<\/span> Todos<\/span> os programas<\/span> honeypot<\/span> em rela\u00e7\u00e3o \u00e0 vers\u00e3o<\/span> anterior do<\/span> HoneyDrive<\/span> est\u00e3o inclu\u00eddos, enquanto<\/span> os programas, tamb\u00e9m<\/span> foram atualizados para<\/span> as suas \u00faltimas vers\u00f5es<\/span> e convertido<\/span> quase que inteiramente<\/span> para<\/span> reposit\u00f3rios<\/span> git<\/span> clonados<\/span> para facilitar a manuten\u00e7\u00e3o<\/span> e atualiza\u00e7\u00e3o.<\/span> Este<\/span> \u00faltimo fato<\/span> por si s\u00f3<\/span> pode ser considerado uma<\/span> raz\u00e3o<\/span> suficiente para liberar<\/span> a nova vers\u00e3o.<\/span> <\/span><\/p>\n


\n3)<\/span> Muitos <\/span>programas novos<\/span> honeypot<\/span> foram instalados,<\/span> que realmente providencia ao<\/span> HoneyDrive<\/span> 3 uma caracter\u00edstica de distribui\u00e7\u00e3o <\/span>completa, em termos de tecnologia<\/span> honeypot<\/span>, al\u00e9m de cerca de 50<\/span> ferramentas r<\/span>elacionados<\/span> a nova seguran\u00e7a<\/span> nas \u00e1reas de<\/span> an\u00e1lise de malware<\/span>, forense e<\/span> monitoramento de rede.<\/span> <\/span><\/p>\n


\n4)<\/span> Os principais<\/span> pacotes de software de<\/span> honeypot<\/span> e projetos<\/span> de<\/span> BruteForce<\/span> Lab<\/span> residem em \/<\/span> honeydrive<\/span>. O<\/span> resto dos programas<\/span> residir<\/span> em \/ opt<\/span>. A localiza\u00e7\u00e3o<\/span> de todos os softwares<\/span> podem ser encontrados<\/span> no arquivo<\/span> readme.txt no<\/span> desktop.<\/span> <\/span><\/p>\n

Finalizando, com o HoneyDrive<\/span> voc\u00ea economiza tempo<\/span>. Devido ter todos os<\/span> principais softwares<\/span> relacionados com o<\/span> honeypot<\/span> pr\u00e9-instalado<\/span> e pr\u00e9-<\/span>configurado para trabalhar fora da caixa<\/span> (ou<\/span> com<\/span> algumas op\u00e7\u00f5es de configura\u00e7\u00e3o<\/span> de<\/span> sua prefer\u00eancia<\/span>).\u00a0 O HoneyDrive<\/span> cont\u00e9m todos os<\/span> principais softwares<\/span> relacionados com o<\/span> honeypot<\/span> e uma tonelada<\/span> de ferramentas mais<\/span> \u00fateis.<\/span> Para uma lista completa<\/span> basta verificar <\/span>o arquivo<\/span> Readme.txt inclu\u00eddo<\/span> no<\/span> dispositivo virtual.<\/span> (voc\u00ea<\/span> vai encontr\u00e1-lo<\/span> na \u00e1rea de trabalho<\/span>) ou on-line<\/span> na se\u00e7\u00e3o de<\/span> download<\/span> do<\/span> SourceForge<\/span>. <\/span><\/p>\n

Para obter o HoneyDrive 3, basta acessar o seguinte link: http:\/\/sourceforge.net\/projects\/honeydrive\/<\/a><\/p>\n

Fonte: http:\/\/hack-tools.blackploit.com\/2014\/08\/honeydrive-3-premier-honeypot-linux.html<\/p>\n

Um grande abra\u00e7o a todos\u00a0 !!!<\/p>\n

\r\n\t\t

\r\n\t\t\t
\r\n\t\t\t\t
\r\n\t\t\t\r\n\t\t\t
<\/div>\r\n\t\t<\/div> \r\n\t\t
\r\n\t\t\t

By:\u00a0Gerson Raymond<\/p>\n

T\u00e9cnico em Contabilidade, T\u00e9cnico em Eletr\u00f4nica, T\u00e9cnico em Telecomunica\u00e7\u00f5es, Bacharel em Ci\u00eancia da Computa\u00e7\u00e3o, Administrador de Redes Linux (CentOS, XEN, Zabbix, Asterisk\/Elastix) e P\u00f3s-Graduado em\u00a0Seguran\u00e7a em Tecnologia da Informa\u00e7\u00e3o \u2013 UNIVERSIDADE MACKENZIE \u2013 SP.<\/p>\n

Homepage:\u00a0http:\/\/www.grsecurity.com.br<\/a><\/p>\n

\r\n\t\t<\/div> <\/p>\n

\r\n\t\t\t<\/div> \r\n\t\t<\/div> <\/p>\n","protected":false},"excerpt":{"rendered":"

Ol\u00e1 pessoal !!! Bem vindo ao site Ethical Hacker !!! O HoneyDrive \u00e9 uma\u00a0 distro Linux honeypot. \u00c9 um dispositivo virtual em Open Virtualization Alliance (OVA), atrav\u00e9s da edi\u00e7\u00e3o desktop Xubuntu 12.04.4 LTS instalada. Ele cont\u00e9m mais de 10 pacotes de software de honeypot pr\u00e9-instalados e pr\u00e9-configurados, como Kippo SSH honeypot, Dionaea e Amun honeypots […]<\/p>\n","protected":false},"author":2,"featured_media":7879,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[89,100,99],"tags":[],"class_list":["post-7873","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-basico","category-diversos","category-novidades"],"_links":{"self":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts\/7873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/comments?post=7873"}],"version-history":[{"count":17,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts\/7873\/revisions"}],"predecessor-version":[{"id":10371,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/posts\/7873\/revisions\/10371"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/media\/7879"}],"wp:attachment":[{"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/media?parent=7873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/categories?post=7873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ethicalhacker.com.br\/site\/wp-json\/wp\/v2\/tags?post=7873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}