Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

建议做一个中交互RDP蜜罐 #203

Open
ICONQUESTION opened this issue Jan 27, 2023 · 0 comments
Open

建议做一个中交互RDP蜜罐 #203

ICONQUESTION opened this issue Jan 27, 2023 · 0 comments

Comments

@ICONQUESTION
Copy link

如题，我在服务器上安装HFish之后，发现每天都有很多针对RDP（3389）的攻击记录，但官方蜜罐目前只有一个TCP端口监听的通用型低交互蜜罐，用RDP客户端尝试连接后提示错误。可不可以做一个中交互的RDP蜜罐（GUI认证或NLA认证），让攻击者可以输入账号密码后再断开连接这样子？我想记录攻击者所使用的账号密码凭据。感谢！
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ICONQUESTION