GuardMoony

1st off i wont be running on my private internet connection. It will be placed in a datacenter after a firewall. Only port 22 will be configured as forward ( ssh honeypot ) outgoing only the minimum will be allowed. Access to the vps running it will happen over a vpn towards the vps server and then by console ( close to direct as possible ). Might allow trusted community members access to the data. there are some scripts to let it autosend the data/logs by mail.

Do any of you guys have any experience with kippo ? I'm looking to set up my first honeypot. You know just to see and test out. And i'm wondering if any got some tips / tricks they might want to share. Kind regards, GuardMoony

Still need to do more testing on it. But for my intentions it seems stable. ( no longtime test yet ). Also i'm not running it with wifi. Your saying DoS prevention not DDoS. Big difference there. And yes it will probably just drop all packets it receives from that ip. Kinda loled they call a NAT a firewall. Even a home and kitchen router for 30$ got NAT and spi

i recently bought a alix board. for router/AP. Great small pieces of hardware. pfsense can be run on these! http://www.pcengines.ch/alix.htm

The mean problem for beeing loud is not hearing yourself. enable listening on the microphone helps a lot. But it requires getting used to it. Or get a headset like turtlebeach px22 that has the option in the controler. Buying earplugs to sleep with is also a cheap option :D All the other stuff is only going to piss him off en result in lesser sleep for you :/

Ah signs..... Reminds me of cern opendays. We got a sign after the end. Took it al the way back home in the car. It barely fit inside the car. Good times :)

Line 211 is wps connection failed. You mean line 144 Sebkine? Maybe a quick and dirty line of testcode like: system("rateLimitScript.sh");

I will wait if someone from the UK wants it. If no one wants it in the UK and your willing to ship it towards europe mainland. ( willing to pay the transport cost ). Just send a pm :) I do want to see some pictures or prove of perchase. Seeing your a first time poster on this forum.

GL HF.

I'm no moderator. And your free to ask questions. But i dont think there to many people here that can help you. The thing i do can say your better of finding the local ham radio section. They could help you the best. I also highly doubt it you can get all that gear for less then 300$. The place where i live you are required to have the license before you can buy the radio. The keep your price low. I would look at mobile stations. Ok they dont have the big power output but are way cheaper to get. Regards, GuardMoony

It may be simpler to add some code-patch to the source. So when it detects the limiter it runs a script.

it handles chainbooting. so your uboot will just boot the sd card. this would contain the gPXE that boots your os. it can boot iSCSI targets, pull over http ( wich you can send parameters like a MAC or ip or ... ) you can even setup a authentication. so the user can only select operating systems he has access to. The http is not restricted to local subnet. so you could load a image of a server on the other side of the world. If you cant watch it all i suggest start near minute 50 then the fun things start. OK last i found is that its not fully ported to arm. so your right its not usefull for udroid

Ah but this not need to be in the bios. You can place it on the SD card :) It also gives to option to load your image over http cross subnets. Googletalks has a nice talk over it.

A other small option: make a uniform small boot on sd cards. That boots the main image from a share. The thing i was looking in to: http://etherboot.org/wiki/start

I'm kind of sad that udroid does not support pxe boot :(

If i remember the pineapple was based of openwrt. So it might be possible to install openwrt. And then everything is on it to run it as full router. You need to check with the pineapple people for this :p Also you could setup the pineapple as a router. But i would only use it as a short temporary fix.

You could always reflash the pineapple with the firmware provided.

I hope for you they fit. Like the quote of the offical website says to use 0.8mm insted of 0.7mm

So did you look into getting the power cables? Something like: http://www.ebay.com/itm/Power-Plug-Connector-Cable-Cord-For-HP-Dell-Samsung-ASUS-EEE-PC-Laptop-Adapter-/351064636050?pt=LH_DefaultDomain_0&var=&hash=item51bd153a92 2.99$ each but 16$ shipment or http://www.ebay.com/itm/NEW-2-5mm-x-0-8mm-DC-Tip-Plug-Connector-with-Cord-For-Android-Tablet-5V-2A-/271200228623?pt=US_USB_Cables_Hubs_Adapters&hash=item3f24cb150f there 4.99$ but no shipment. ( reported as gift ) and get tracing for 3$ but its pretty expansive for a cable :(

Ah the joys of development. There's always something better/newer to be added or changed. At some point you will just have to say. And now this is it. No more changes!

Nice to see you keep posting updates. Damn that still a pretty expansive project. Would be nice to see some pictures. If you can ofc.

Verry nice tutorial. Only the volume is on the low side.

Ok for that kind of setup your better of settting a static ip on your laptop. lets say 172.16.42.254 ( this becomes your GW for the 172.16.42.XXX network, DO NOT SET A GW HERE ) Also enable ip routing on this device. ( if its windows use enable share internet connection on wireless, also check firewalling ) Linux you need something like: echo 1 > /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -o wlan0 -j MASQUERADE iptables -A FORWARD -i eth0 -j ACCEPT Now configure the Pineapple: nameserver as 8.8.8.8 or 8.8.4.4 ( or 192.168.2.100 if router does dns ) DHCP server settings in pineapple: dns set as 172.16.42.1 gateway set as 172.16.42.254 Now you run your commands: airmon-ng start wlan1 start airbase-ng, on wlan1 - created interface at0 is listed ifconfig at0 up br-ctl addif br-lan at0 Then should do it. If not do the following tests: ping 172.16.42.1 ping 172.16.42.254 ping 192.168.2.100 nslookup www.google.com or dig www.google.com ( dont know wich command you use )

Don't do a killall hostapd. i suggest you reboot your pineapple now to make sure all services and configurations are loaded proper. We also need your GW ip adress, subnet and all of that stuff. If i'm correct, this is your setup: Alfa <=USB=>Pineapple<=ethernet=>laptop ^ || Wireless || v Router/gw/ap/internet

Yeah taught so. There hell of expensive for EU Something i found: http://chadillac.servebeer.com/