Low interaction MySQL honeypot written in C
mysql-honeypotd [options]...
Mandatory arguments to long options are mandatory for short options too.
-i， controller ip-o， controller port-b,--address ADDRESSthe IP address to bind to (default: 0.0.0.0). Can be specified several times-p,--port PORTthe port to bind to (default: 3306)-P,--pid FILEthe PID file-n,--name NAMEthe name of the daemon for syslog (default:mysql-honeypotd)-u,--user USERdrop privileges and switch to thisUSER(default:daemonornobody)-g,--group GROUPdrop privileges and switch to thisGROUP(default:daemonornogroup)-c,--chroot DIRchroot() into the specifiedDIR-s,--setver VERset MySQL server version toVER(default: 5.7.19)-d,--delay DELAYAddDELAYseconds after each login attempt-f,--foregrounddo not daemonize (forced if no PID file specified)-x,--no-sysloglog errors to stderr only; ignored if-fis not specified-h,--helpdisplay this help and exit-v,--versionoutput version information and exit
Notes:
--user,--group, and--chrootoptions are honored only if mysql-honeypotd is run asroot- PID file can be outside of chroot
- When using
--nameand/or--group, please make sure that the PID file can be deleted by the target user
controller.py example
import socket
def start_server(host, port):
# 创建套接字
server_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
# 绑定地址和端口
server_socket.bind((host, port))
# 监听连接
server_socket.listen(1)
print(f"正在监听 {host}:{port} ...")
while True:
# 接受连接
client_socket, client_address = server_socket.accept()
# 接收消息
data = client_socket.recv(1024)
print(f"{data.decode('utf-8')}")
# 关闭连接
client_socket.close()
if __name__ == "__main__":
server_host = "0.0.0.0"
server_port = 8080
start_server(server_host, server_port)
Oct 20 22:06:45 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:4240 to x.x.x.146:3306 (using password: YES)
Oct 20 22:06:45 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:4281 to x.x.x.135:3306 (using password: YES)
Oct 20 22:06:46 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:4570 to x.x.x.146:3306 (using password: YES)
Oct 20 22:06:46 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:4644 to x.x.x.135:3306 (using password: YES)
Oct 20 22:06:46 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:4949 to x.x.x.146:3306 (using password: YES)
Oct 20 22:06:47 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:4998 to x.x.x.135:3306 (using password: YES)
Oct 20 22:06:47 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:1238 to x.x.x.146:3306 (using password: YES)
Oct 20 22:06:47 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:1264 to x.x.x.135:3306 (using password: YES)
Oct 20 22:06:48 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:1537 to x.x.x.135:3306 (using password: YES)
Oct 20 22:06:49 server mysql-honeypotd[22363]: Access denied for user 'root' from 222.186.61.231:2370 to x.x.x.135:3306 (using password: YES)
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent