Re: ARP responding honey pot to any unused ip address
[email protected] Sun, 24 Apr 2005 20:17:02 -0400
| Newsgroups | gmane.comp.security.honeypots |
|---|---|
| Message-ID | <[email protected]> |
Find out the dark address space before hand and configure them separately and differently so that he doesn't observe this homogeniety. -sushant. Quoting mohsin saleem <[email protected]>: > hi!! > we are a group of friends working to implement honeyD for windows, or u can > say trying to port it to windows. > though we know it has been recently ported to windows, but we started this > work couple of months ago, so > not gonna leave this project now:) > I have found some bug in it, as i discuss it : > a hacker tries to find around 50 IP address in a network > honeyD finds them to be acvailable. > it acclaims them and starts commyunicating with hacker. > hacker tests them all for being win2k professional. > honey shows this nicely. > Now any hacker having a bit of common sense will start laughing: > 50 IPs + having HOST OS as WIN2K + OFFERING 100% same services!!! > infact, 50 SERVERS OFFERING 100% SAME service ..OO MY GOD.. it never happens > he will laugh. > I dont know whether I'm right or wrong, please help me to ge things clear. > thanx > Mohsin Saleem > ~*~ Elite Hacker from PAKISAN~*~ > > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com