-
-
Notifications
You must be signed in to change notification settings - Fork 138
Usage
______ __ _____ _____
/ __ \ \ / /\ / ____| __ \
| | | \ \ /\ / / \ | (___ | |__) |
| | | |\ \/ \/ / /\ \ \___ \| ___/
| |__| | \ /\ / ____ \ ____) | |
\____/ \/ \/_/ \_\_____/|_|
_ _ _____ _
| | | | | __ \ | |
| |__| | ___ _ __ ___ _ _| |__) |__ | |_
| __ |/ _ \| "_ \ / _ \ | | | ___/ _ \| __|
| | | | (_) | | | | __/ |_| | | | (_) | |_
|_| |_|\___/|_| |_|\___|\__, |_| \___/ \__|
__/ |
|___/
usage: OWASP Honeypot [-m SELECTED_MODULES] [-x EXCLUDED_MODULES] [-s VIRTUAL_MACHINE_STORAGE_LIMIT] [-r VIRTUAL_MACHINE_CONTAINER_RESET_FACTORY_TIME_SECONDS] [--start-api-server] [--store-pcap]
[-t TIMEOUT_VALUE] [-v] [--disable-colors] [--test] [-h]
OHP Engine:
OHP Engine input options
-m SELECTED_MODULES, --select-module SELECTED_MODULES
select module(s) ['smtp/strong_password', 'ics/veeder_root_guardian_ast', 'http/basic_auth_strong_password', 'http/basic_auth_weak_password', 'ftp/strong_password',
'ftp/weak_password', 'ssh/strong_password', 'ssh/weak_password', 'all']
-x EXCLUDED_MODULES, --exclude-module EXCLUDED_MODULES
select modules(s) to exclude ['smtp/strong_password', 'ics/veeder_root_guardian_ast', 'http/basic_auth_strong_password', 'http/basic_auth_weak_password', 'ftp/strong_password',
'ftp/weak_password', 'ssh/strong_password', 'ssh/weak_password']
-s VIRTUAL_MACHINE_STORAGE_LIMIT, --vm-storage-limit VIRTUAL_MACHINE_STORAGE_LIMIT
virtual machine storage limit
-r VIRTUAL_MACHINE_CONTAINER_RESET_FACTORY_TIME_SECONDS, --vm-reset-factory-time VIRTUAL_MACHINE_CONTAINER_RESET_FACTORY_TIME_SECONDS
virtual machine reset factory time
--start-api-server start API server
--store-pcap store network traffic as pcap files
-t TIMEOUT_VALUE, --split-pcap-file-timeout TIMEOUT_VALUE
timeout value used to split network captured files
-v, --verbose enable verbose mode
--v, --very-verbose enable very verbose mode
---v, --extreme-verbose
enable extreme verbose mode
--disable-colors disable colors in CLI
--language LANGUAGE Set the default language. ['es_ES', 'ru_RU', 'en_US', 'fr_FR', 'de_DE']
--test run a test and exit
-h, --help print this help menu
if you executepython ohp.py
it will be run by default configuration, otherwise, it will follow your commands.
simply you may select module by using -m
switch (e.g. -m ftp/weak_password
or -m ftp/weak_password,ssh/weak_password
(to select multi-modules)).
if you are using default config (
e.g. "default_selected_modules": "ftp/weak_password,ssh/weak_password,http/basic_auth_weak_password") and you would like to exclude any module at the moment, you can use
-xswitch (multiple module could be selected by
,` as well).
this switch is not working at the moment, to limit the container storage modify/etc/init.d/docker
.
log_begin_msg "Starting $DOCKER_DESC: $BASE"
start-stop-daemon --start --background \
--no-close \
--exec "$DOCKERD" \
--pidfile "$DOCKER_SSD_PIDFILE" \
--make-pidfile \
-- \
-p "$DOCKER_PIDFILE" \
$DOCKER_OPTS \
>> "$DOCKER_LOGFILE" 2>&1
log_end_msg $?
- change to (add
--storage-opt dm.basesize=0.5G
)
log_begin_msg "Starting $DOCKER_DESC: $BASE"
start-stop-daemon --start --background \
--no-close \
--exec "$DOCKERD" --storage-opt dm.basesize=0.5G \
--pidfile "$DOCKER_SSD_PIDFILE" \
--make-pidfile \
-- \
-p "$DOCKER_PIDFILE" \
$DOCKER_OPTS \
>> "$DOCKER_LOGFILE" 2>&1
log_end_msg $?
-r
, --vm-reset-factory-time
to prevent being a zombie or botnet, you can reset the container every period of time by using this switch. the input is seconds. so if you want to reset every one hour its -r 3600
By using this switch, you will start the API server without any authentication required! to enable the authentication,
set api_access_without_key
as True
in config.py. the authentication key must send as
parameter key
in every request (could be set as Cookie, GET, POST).
This flag sets the "store_network_captured_files" parameter as true
. It will store the network traffic into "pcap"
files.
This flag is used to set the timeout values that will be used to split the "pcap" files. Default value is 3600 (i.e 1 hour).
To see more information while running the OWASP Honeypot
To see more information while running the OWASP Honeypot - enable very verbose mode
To see more information and error path while running the OWASP Honeypot - enable extreme verbose mode
To disable the colors in printing use this switch!
You know about this!
Set the default language. Available options are
-
es_ES
(Spanish) -
ru_RU
(Russian) -
en_US
(English) -
fr_FR
(French) -
de_DE
(German)