Honeypots mailing list archives
RE: Windows Honeypot Help
From: "Wiles, Sean" <Sean.Wiles () marks-and-spencer com>
Date: Thu, 19 Feb 2004 10:55:37 -0000
Hi, I have been having some success using net cat (NC) and standard win 2k logging. I have used multiple IP's on one W2K server. Seem to have issues hiding or spoofing the MAC though. Also had a play with honeyd v0.5, is okay too. Don't know if this helps. My 2p's worth :) -----Original Message----- From: Ted [mailto:padmin () adelphia net] Sent: Monday, February 16, 2004 4:09 AM To: honeypots () securityfocus com Subject: Windows Honeypot Help Hello, Bottom line up front, I'm looking for some kind of script/software combination that will allow me to emulate services and log interaction with those fake services on a Win2k honeypot. Now for some details. ----------------------------------------------------------------------- Registered Office: Marks & Spencer p.l.c Michael House, Baker Street, London, W1U 8EP Registered No. 214436 in England and Wales. Telephone (020) 7935 4422 Facsimile (020) 7487 2670 www.marksandspencer.com Please note that electronic mail may be monitored. This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful. The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB. These firms are authorised and regulated by the Financial Services Authority.
Current thread:
- Windows Honeypot Help Ted (Feb 16)
- Re: Windows Honeypot Help SecurIT Informatique Inc. (Feb 16)
- RE: Windows Honeypot Help sunzi (Feb 17)
- <Possible follow-ups>
- RE: Windows Honeypot Help David LeBlanc (Feb 18)
- RE: Windows Honeypot Help Byron Copeland (Feb 19)
- RE: Windows Honeypot Help Wiles, Sean (Feb 19)
- Re: Windows Honeypot Help SecurIT Informatique Inc. (Feb 16)