An uploader honeypot designed to look like poor website security.

Chad Baxter

Last update: Dec 20, 2022

Related tags

Cryptography honeyup

Overview

HoneyUp

An uploader honeypot designed to look like poor website security.

Requirements

Linux server
NGiNX
Rust toolchain (build only)

Installation

Build using cargo build --release.
Log into your server and create a honeyup user with a home directory.
Upload/copy the contents of this repo to your honeyup user's home /home/honeyup.
Copy the honeyup binary from target/release/ to /home/honeyup.
Edit res/config.env.txt to make it believable (add some canary tokens too).
Upload/copy the systemd service descriptor from conf/honeyup.service to /etc/systemd/system/honeyup.service.
Reload all systemd service descriptors systemctl daemon-reload.
Ensure any currently served sites do not use the /uploads path.
Add the contents of conf/nginx_snippet.conf to your NGiNX config just above your server's location blocks.
Reload the NGiNX config with systemctl reload nginx.
Enable and start the honeyup service systemctl enable honeyup & systemctl start honeyup.
Browse to /uploads on your website and use upload.php to upload some dummy/bait files.

Notes

Be sure to check up on the uploaded_files folder often to be sure you aren't hosting somebody's malware.

Implementation of Sunny's Mesh Security talk (Hackathon / Prototype status)

mesh-security (Hackathon / Prototype status) An implementation of Sunny's Mesh Security talk from Cosmoverse 2022. This should run on any CosmWasm ena

83 Apr 17, 2023

A CLI application that implements multi-key-turn security via Shamir's Secret Sharing.

agree agree is a CLI tool for easily applying multi-key-turn security via Shamirs Secret Sharing. Project state agree is unstable. Version semantics:

19 Aug 29, 2023

Standing watch over the Pi Network, PiSentinel is a consensus algorithm that safeguards security, decentralization, and scalability.

pi-sentinel Standing watch over the Pi Network, PiSentinel is a consensus algorithm that safeguards security, decentralization, and scalability. Intro

3 Aug 4, 2024

Comments

Dockerized HoneyUp

I dockerized the backend such that users can just docker-compose instead of worrying about building.

If this pull request is accepted, the Dockerfile.dev will need to be edited to use this repo instead of mine.

opened by StappsWorld 0

An uploader honeypot designed to look like poor website security.

Related tags

Overview

HoneyUp

An uploader honeypot designed to look like poor website security.

Requirements

Installation

Notes

You might also like...

Implementation of Sunny's Mesh Security talk (Hackathon / Prototype status)

A CLI application that implements multi-key-turn security via Shamir's Secret Sharing.

Standing watch over the Pi Network, PiSentinel is a consensus algorithm that safeguards security, decentralization, and scalability.

A solana program designed to mint Metaplex compliant NFTs.

The protocol are designed and made for the future of cross-IP, cross-chain metaverse.

Flashcards: A spaced repetition app designed around org files.

Tradechain is an open source blockchain designed for fast trading & interoperability for new, existing assets

A down-to-the-metal ongoing cryptography challenge designed by Radical Semiconductor.

Glommio Messaging Framework (GMF) is a high-performance RPC system designed to work with the Glommio framework.

Comments

Dockerized HoneyUp

Owner

Chad Baxter

A blazingly fast, ShareX uploader coded in Rust (using actix web) which utilizes AES-256-GCM-SIV to securely store uploaded content.

Bindings to the macOS Security.framework

A Rust implementation of the Message Layer Security group messaging protocol

A suite of programs for Solana key management and security.

Audit Cargo.lock files for dependencies with security vulnerabilities

Ingraind - a security monitoring agent built around RedBPF for complex containerized environments and endpoints.

security.txt for Solana Contracts

Automated security testing for open source libraries and applications.

Open-source tool to enforce privacy & security best-practices on Windows and macOS, because privacy is sexy 🍑🍆

Koofr Vault is an open-source, client-side encrypted folder for your Koofr cloud storage offering an extra layer of security for your most sensitive files.