Skip to content

Instantly share code, notes, and snippets.

@adliwahid

adliwahid/demo_web_honeypot.py

Forked from glaslos/demo_web_honeypot.py
Created March 23, 2016 23:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save adliwahid/720ea9f60758093a52bf to your computer and use it in GitHub Desktop.
Save adliwahid/720ea9f60758093a52bf to your computer and use it in GitHub Desktop.
Download ZIP
demo_web_honeypot
Raw
demo_web_honeypot.py
import SimpleHTTPServer
import SocketServer
paths = set()
class Handler(SimpleHTTPServer.SimpleHTTPRequestHandler):
def do_GET(self):
# Detect remote file inclusion
if '=http' in self.path:
print 'RFI detected'
# TODO: Add RFI handler here
# Detect local file inclusion
elif '../../' in self.path:
print 'LFI detected'
# TODO: Add LFI handler here
# Collect dorks from attacks
paths.add('<a href="{}">a link?</a><br />'.format(self.path))
# Compose the attack surface, adding all dorks
http_doc = """
<html>
<style>
a:link, a:visited, a:active, a:hover{{
color:#000000;
text-decoration:none;
cursor:text;
}}
</style>
is there
<a href='http://google.com'>a link?</a><br />
{}
</html>
""".format(
''.join(paths)
)
# Send response
self.wfile.write(http_doc)
if __name__ == '__main__':
SocketServer.TCPServer.allow_reuse_address = True
httpd = SocketServer.TCPServer(('localhost', 8080), Handler)
print "Serving at port 8080"
try:
httpd.serve_forever()
except KeyboardInterrupt:
print 'bye'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment