Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Background

I would like to setup a honeypot server on a Windows 7 PC.

  • My system is not part of a network and I don't run a server.
  • I have a Windows 7 desktop PC.
  • It's Home Premium Anytime Upgrade 32-bit OS and 32-bit PC.
  • I don't have a wireless card.
  • I do have a wireless router and its D-link DIR-815.
  • I do use my iPhone as WiFi and does not require a wireless card.

Question

Where would I find an exact step-by-step tutorial on how to set up a honeypot, start to finish? Are any free honeypots available?

share|improve this question
3  
LateralFractal: Why did you edit and write English is not my native language? It is my native language and its the only language I know. –  user31251 Sep 26 '13 at 0:38
1  
Sorry about that, I have removed it from the question. It was an unverifiable assumption on my part. –  LateralFractal Sep 26 '13 at 1:25
    
What kind of honeypot do you want? Web, network? Do you understand the risks of running a honeypot on your own desktop? You are hoping that you get hacked: are you comfortable with a known hacker getting part way into your computer and hoping that he can't get further? –  schroeder Oct 2 '13 at 19:48
    
What do you hope to do with the honeypot? Prevent traffic to unauthorized locations, or are you doing research? –  schroeder Oct 2 '13 at 19:52

3 Answers 3

We cannot provide a complete step-by-step tutorial. You will have to figure some things out on your own. If you cannot, then running a honeypot is simply too dangerous because you ARE exposing yourself to a hacker and you need to know what you are doing.

1. Set up a protected environment for the honeypot

This is best done with a second cheap computer/laptop, but this can also be done with a virtual environment. I use VirtualBox: it is free and works very well. Once you get this going, then you have a choice in operating system. Linux really is the best choice here for the number of excellent and free honeypots available as well as the few resources it needs to run, which makes it perfect for cheap hardware or a virtual machine.

2. Choose a honeypot

You need to know what you want to do with your honeypot in order to make a choice here. 99% of them are free and on Linux.

3. Configure your router and firewalls (hardware and software)

This is where you can really hurt yourself if you do not know what you are doing. The honeypot you choose will determine what ports you need to open up and direct to your honeypot. You also need to make sure that traffic from your honeypot does not get directed to anywhere but the outside. No step-by-step tutorials here. You have to know. Get someone who does know to verify your configuration. Even I do that with my firewalls, and I'm a professional.

share|improve this answer
    
Good advice on getting someone else to look at your firewall configuration. It always helps to have another set of eyes look at critical configurations, no matter how many times you've done it. –  DKNUCKLES Oct 26 '13 at 14:02

There aren't many tools to setup honeypots on Windows, but if you insist to give it a try using Windows 7, here are two that I have used in the past:

  1. HoneyBOT (start here, it is a general purpose honeypot that can emulate many services)
  2. Omnivora (a second option, mostly to catch auto propagating malware)

Otherwise, just install VirtualBox and then download HoneyDrive (a virtual appliance with many honeypots preinstalled and mostly preconfigured).

share|improve this answer

Please check this answer to an old question on this forum. From the answer, there exists some tools for creating honeypots and for logging and monitoring activity on honeypots.

share|improve this answer
    
I'm confused. I still don't know how to setup any honeypots and where to get them from. –  user31251 Sep 26 '13 at 10:21
    
I would recommend you to start with honeyd (honeyd.org/general.php) first. Also the book, Virtual Honeypots: From Botnet Tracking to Intrusion Detection maybe helpful for you as well. –  Jor-el Sep 26 '13 at 10:56
    
Are there any setup tutorials like this one but for Windows howtoforge.com/… ? That tutorial is for Linux but I'm on Windows. –  user31251 Sep 26 '13 at 11:23
    
You'll need to virtualise the honeypot server anyway, so you might as well save money and put it on Linux. (You have to virtualise it, because your Windows box is not on a network, so if you make it the honeypot, there's nowhere for the attacker to stand.) –  Graham Hill Sep 26 '13 at 12:14
    
So, first, the complete process for the honeypot would not be free? Second, I don't use Linux, *nix, etc. I use everyday a Microsoft OS which is Windows 7. Pretty much I don't want to go to an unfamiliar OS such as Linux and not know what I'm doing just to setup honeypot. If I wanted to learn Linux I would of took the time to switch my OS. And I don't feel comfortable with a dual boot, or even running Linux in VirtualBox. Would this be free on Windows? –  user31251 Sep 26 '13 at 21:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.