[Dshield] webhoneypot
Manuel
lists at grospolina.org
Thu Nov 27 18:48:04 GMT 2008
Hello people at dshield.org, hello Mr. Ullrich!
I need to know,
wether this maillist is the correct one to post to regarding
the "Web Application Honeypot" - project you started.
Mail to info at dshield.org was ignored.
Questions:
How the data will be used (POSTed to isc1)?
(I won't be amused to see my adresses caused by testing in one of your
lists)
Yesterday POSTing to isc1 fails,
so no document had been delivered to the attackers clients.
I changed the "index.php" of webhoneypot in a way,
so that it will first deliver the document and POST to isc1 when done.
Isn't it a good idea to change it in the webhoneypots tarball, too?
I added two new templates,
one for s9y blog and another for joomla and joomla administrator page.
I'm using href to existing sites for css, js, pictures.
Do you see issues doing it this way?
(I used existing sites of my own to build the templates claiming 1600
f for me)
greets,
Manuel
(user 65964441)
p.s.
(I hope that it is not needed to post with full name to the list,
you already know it)
More information about the Dshield
mailing list