Skip to content

Latest commit

 

History

History
65 lines (41 loc) · 1.12 KB

opencanary.md

File metadata and controls

65 lines (41 loc) · 1.12 KB
Raw

1.0 Opencanary Guide

1.1 Initial setup

First you should enter the Python virtual environment for OpenCanary:

source ~/venv/bin/activate

Before the first run, generate a default opencanary config

opencanaryd --copyconfig

This will create a folder and config file in /etc/opencanaryd/opencanary.conf

2.0 Exercises

2.1 Configure opencanary

You must now edit the config file to determine which services and logging options you would like to enable.

sudo vim /etc/opencanaryd/opencanary.conf

Play around and try enable the following services:

  • SMB
  • MSSQL
  • MYSQL
  • VNC

2.2 Run open canary

This will run opencanary in dev mode which will allow you to see the live output from opencanary

opencanaryd --start

2.3 Fake an attack

ftp SERVER_IP
Connected to SERVER_IP.
220 FTP server ready

Name (SERVER_IP:ubuntu): honeypot

331 Password required for honeypot.
Password: FAKE_PASSWORD
530 Sorry, Authentication failed.
Login failed.

ftp> exit
221 Goodbye.

2.4 Check your logs

Check that opencanary is picking up your failed ftp authentication logs less /var/tmp/opencanary.log