Skip to content
Mrigank Anand edited this page Sep 10, 2022 · 22 revisions
      ______          __      _____ _____
     / __ \ \        / /\    / ____|  __ \
    | |  | \ \  /\  / /  \  | (___ | |__) |
    | |  | |\ \/  \/ / /\ \  \___ \|  ___/
    | |__| | \  /\  / ____ \ ____) | |
     \____/   \/  \/_/    \_\_____/|_|
                      _    _                        _____      _
                     | |  | |                      |  __ \    | |
                     | |__| | ___  _ __   ___ _   _| |__) |__ | |_
                     |  __  |/ _ \| "_ \ / _ \ | | |  ___/ _ \| __|
                     | |  | | (_) | | | |  __/ |_| | |  | (_) | |_
                     |_|  |_|\___/|_| |_|\___|\__, |_|   \___/ \__|
                                               __/ |
                                              |___/

usage: OWASP Honeypot [-m SELECTED_MODULES] [-x EXCLUDED_MODULES] [-s VIRTUAL_MACHINE_STORAGE_LIMIT] [-r VIRTUAL_MACHINE_CONTAINER_RESET_FACTORY_TIME_SECONDS] [--start-api-server] [--store-pcap]
                      [-t TIMEOUT_VALUE] [-v] [--disable-colors] [--test] [-h]

OHP Engine:
  OHP Engine input options

  -m SELECTED_MODULES, --select-module SELECTED_MODULES
                        select module(s) ['smtp/strong_password', 'ics/veeder_root_guardian_ast', 'http/basic_auth_strong_password', 'http/basic_auth_weak_password', 'ftp/strong_password',
                        'ftp/weak_password', 'ssh/strong_password', 'ssh/weak_password', 'all']
  -x EXCLUDED_MODULES, --exclude-module EXCLUDED_MODULES
                        select modules(s) to exclude ['smtp/strong_password', 'ics/veeder_root_guardian_ast', 'http/basic_auth_strong_password', 'http/basic_auth_weak_password', 'ftp/strong_password',
                        'ftp/weak_password', 'ssh/strong_password', 'ssh/weak_password']
  -s VIRTUAL_MACHINE_STORAGE_LIMIT, --vm-storage-limit VIRTUAL_MACHINE_STORAGE_LIMIT
                        virtual machine storage limit
  -r VIRTUAL_MACHINE_CONTAINER_RESET_FACTORY_TIME_SECONDS, --vm-reset-factory-time VIRTUAL_MACHINE_CONTAINER_RESET_FACTORY_TIME_SECONDS
                        virtual machine reset factory time
  --start-api-server    start API server
  --store-pcap          store network traffic as pcap files
  -t TIMEOUT_VALUE, --split-pcap-file-timeout TIMEOUT_VALUE
                        timeout value used to split network captured files
  -v, --verbose         enable verbose mode
  --v, --very-verbose   enable very verbose mode
  ---v, --extreme-verbose
                        enable extreme verbose mode
  --disable-colors      disable colors in CLI
  --language LANGUAGE   Set the default language. ['es_ES', 'ru_RU', 'en_US', 'fr_FR', 'de_DE']
  --test                run a test and exit
  -h, --help            print this help menu

if you executepython ohp.py it will be run by default configuration, otherwise, it will follow your commands.

m, --select-module

simply you may select module by using -m switch (e.g. -m ftp/weak_password or -m ftp/weak_password,ssh/weak_password (to select multi-modules)).

-x, --exclude-module

if you are using default config ( e.g. "default_selected_modules": "ftp/weak_password,ssh/weak_password,http/basic_auth_weak_password") and you would like to exclude any module at the moment, you can use -xswitch (multiple module could be selected by,` as well).

-s, --vm-storage-limit

this switch is not working at the moment, to limit the container storage modify/etc/init.d/docker.

log_begin_msg "Starting $DOCKER_DESC: $BASE"
start-stop-daemon --start --background \
	--no-close \
	--exec "$DOCKERD" \
	--pidfile "$DOCKER_SSD_PIDFILE" \
	--make-pidfile \
	-- \
		-p "$DOCKER_PIDFILE" \
		$DOCKER_OPTS \
			>> "$DOCKER_LOGFILE" 2>&1
log_end_msg $?
  • change to (add --storage-opt dm.basesize=0.5G)
log_begin_msg "Starting $DOCKER_DESC: $BASE"
start-stop-daemon --start --background \
	--no-close \
	--exec "$DOCKERD" --storage-opt dm.basesize=0.5G \
	--pidfile "$DOCKER_SSD_PIDFILE" \
	--make-pidfile \
	-- \
		-p "$DOCKER_PIDFILE" \
		$DOCKER_OPTS \
			>> "$DOCKER_LOGFILE" 2>&1
log_end_msg $?

-r, --vm-reset-factory-time to prevent being a zombie or botnet, you can reset the container every period of time by using this switch. the input is seconds. so if you want to reset every one hour its -r 3600

--start-api-server

By using this switch, you will start the API server without any authentication required! to enable the authentication, set api_access_without_key as True in config.py. the authentication key must send as parameter key in every request (could be set as Cookie, GET, POST).

--store-pcap

This flag sets the "store_network_captured_files" parameter as true. It will store the network traffic into "pcap" files.

-t, --split-pcap-file-timeout

This flag is used to set the timeout values that will be used to split the "pcap" files. Default value is 3600 (i.e 1 hour).

--verbose

To see more information while running the OWASP Honeypot

--very-verbose

To see more information while running the OWASP Honeypot - enable very verbose mode

--very-verbose

To see more information and error path while running the OWASP Honeypot - enable extreme verbose mode

--disable-colors

To disable the colors in printing use this switch!

-h, --help

You know about this!

--language LANGUAGE

Set the default language. Available options are

  • es_ES (Spanish)
  • ru_RU (Russian)
  • en_US (English)
  • fr_FR (French)
  • de_DE (German)

image_2018-07-17_01-48-26