Honeypots mailing list archives
Capture Client Honeypot, SCOUT and PATROL
From: Christian.Seifert () gmail com
Date: 20 Apr 2007 03:40:03 -0000
Hello all, the New Zealand Honeynet Alliance announces a new release of out high interaction client honeypot, Capture-HPC. This new version contains major enhancements from the initial version of Capture-HPC, namely support for various browsers (Firefox, Internet Explorer and Opera), kernel level monitoring, and compatibility with Microsoft Vista. As such, this new version of Capture-HPC can find malicious web servers that attack a variety of browsers. Capture-HPC can be downloaded from our site at http://www.nz-honeynet.org/capture.html and is distributed under the GNU General Public License. We realize that not everybody has the time and resources to install the client honeypot. As a result, we have created two web services called SCOUT and PATROL. SCOUT allows end users to submit suspicious URLs via a web page to our installation of Capture-HPC in NZ and receive an immediate classification on whether the URL is malicious or benign. PATROL, on the other hand, is a web service designed for web administrators to determine whether their site serves malicious content. Submitted URLs will be periodically monitored and the classification aggregated into a downloadable report (more information about these services can be obtained from http://www.nz-honeynet.org/cwebservice.php and http://www.nz-honeynet.org/cmonitor.php .) Greetings from Aotearoa. Christian
Current thread:
- Capture Client Honeypot, SCOUT and PATROL Christian . Seifert (Apr 20)