Web Honeypot Project
summary
Proof of concept deploys Apache with mod security and the OWASP CRS as honeypot probes on VMs and Docker containers, logs mod_security audit JSON into an ELK stack (Logstash + Elasticsearch + Kibana), and forwards indicators into misp. Implemented honeytraps include fake robot.txt bait, hidden form fields and fake cookies, and fake listening ports to fingerprint clients. The repo converts old MySQL logs to JSON, supports multi‑probe Docker deployments, and plans adaptive ML to tune CRS rules.
AI-written summary · about
chapters (6)
- 0:00Start
- 9:03What is the OWASP Core Rule Set (CRS)?
- 11:40Project Aims & Objectives
- 13:07Original Project
- 15:23Proof of Concept Layout (in Docker format)
- 25:30Questions...
related talks
31mWeb Application Honeypot Threat Intelligence
34mActive Security Honeypot for MySQL and PostgreSQL protecting databases from ransomware attacks
26mLooking at 4 years of web honeypot attacks: tactics, ...
32mFaking a Factory: Creating and Operating a Realistic Honeypot
23mHoneypots 2.0: A New ‘Twist’ on Defending Enterprise Networks
35mCyber Deception 2.0: Adaptive Honeynets and Canary Intelligence in Production
34mWhat Minesweeper Can Teach Us About Security
22mPostgreSQL Threats and Attacks in the Wild