Andy Smith's Blog

Running manuka docker honeypot setup

I've just got dionaea and kippo running in docker images on to make a quick to set up honeypot. The project is called manuka.

Here's how to get manuka running on Ubuntu 14.04:

#install docker (skip if you have docker 1.3+ already)
[ -e /usr/lib/apt/methods/https ] || {
  sudo apt-get update
  sudo apt-get install apt-transport-https
}

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys \
    36A1D7869245C8950F966E92D8576A8BA88D21E9

sudo sh -c "echo deb https://get.docker.com/ubuntu docker main > \
    /etc/apt/sources.list.d/docker.list"

sudo apt-get update
sudo apt-get -y install lxc-docker

#install docker-compose
sudo apt-get install -y python-pip
sudo pip install docker-compose

#run manuka
curl -q https://raw.githubusercontent.com/andrewmichaelsmith/manuka/master/run.sh > run.sh
chmod +x run.sh
sudo ./run.sh

You have just setup dionaea and kippo.

Let's try out kippo:

ssh root@localhost
# > Password: <12345>
# > root@svr03:~#

And dionaea:

sudo nmap  -d -p 445 127.0.0.1 --script=smb-vuln-ms10-061
ls var/dionaea/bistreams
# > total 4.0K
# > drwxr-xr-x 2 nobody nogroup 4.0K Mar 16 23:21 2015-03-16

All logs and files will be saved under $PWD/var/.

Happy to hear any bug reports and feature requests on Github.

Comments !