I developed a (small) honeypot to catch hackers & bots.

[@collinsinfosec]

The commenters have spoken! I will create a crash course on this project. Before I do, I am going to add a few more "advanced" features (as I overviewed at 14:54) to the honeypot, including a small dashboard, tarpit (to trap the skids), and dockerize the application. Stay tuned for a follow-up video and a crash course in the next ~6 weeks.

[@Lucasvrisaqt]

Grant are you able to hack and return my account?

[@davido312]

a crash course on this is something i would definitely tune in to

[@hexaheximal]

Small correction: You don't actually need to run the script as root to accept incoming connections on port 22, and you *really* shouldn't. The smarter approach (this is how my personal website is configured, for example) is to have the script and bind to an unprivileged port (e.g. 1234) and then use a firewall like iptables to redirect incoming traffic from the privileged port to the unprivileged port, in this case something like 22 -> 1234

[@collinsinfosec]

Great to know! I was trying to find a way to do this. Now I know.

[@joopie46614]

You can also change some Linux kernel configs to allow unprivileged users to listen to certain privileged ports, but this way is more secure.

[@hexaheximal]

​@@joopie46614 You *can* do that, but it makes a lot more sense to just change the firewall configuration to set up a port redirect.

[@MiesvanderLippe]

You can use netcap for the user or binary.

[@MiesvanderLippe]

But having fun is the most important. Worst case your vps provider closes your account, whatever

[@smnomad9276]

These are the kind of videos and projects that will set you apart in the job market. You need to have real cyber security projects done that will highlight your skills. Don't get too comfortable in your job you might lose it anytime. Also, stop downplaying your work by saying "small", just directly say honeypot.

[@rollercoaster182]

Let's go with the crash course plsss

[@collinsinfosec]

Sounds good! I will make note of this.

[@r4c0nnoe27]

9:21 test interactiv input is every time most important

[@vinnys8328]

This is really cool! Crazy seeing connections coming from all over the world I looked up those IPs on whois China, Argentina, Singapore. Super interesting!

[@collinsinfosec]

Fun project, going to be building some more advanced features soon.

[@TimMyles]

Would love to see more of this please!

[@AndreasWienes]

I’ve tried something similar with the T-Pot project a while ago and gathered some interesting insights about the attackers and which infrastructure they use. Maybe you want to give this also a try.

[@eliaspfeffer]

This is very interesting. Especially if you can do anything to the bots

[@Liam.s]

would love a crash course this is awesome

[@44544abc]

nice video. please more videos on hostinger vps projects. keep it up

[@imca_b_5517]

Please Continue this Course

[@nft_synergy8880]

Let’s see that course brother🙌

[@selvakumaranand7473]

crash course is highly required

[@johnvardy9559]

you finally woke up!

[@ParkerRC]

Great video Grant!!

[@diro8196]

dark mode is cool

[@malua7021]

Great content

[@robyee3325]

Is it legal to malware your honey pot to catch local adversary?

[@cassandradawn780]

the backslashes were painful.

[@collinsinfosec]

From the results... Yep they were.

[@diegomed3364]

Wish I will create mine

[@dominickthedev]

This video is awesome! The additional project ideas you mentioned could definitely be turned into a fully-fledged application. Well done!

[@collinsinfosec]

I will take that as a +1 for continuing on with the project!

[@trustytrojan]

i would love to host this but how would i run this along with sshd so i can actually access my vps? can iptables forward traffic to two ports while only sending one's traffic back?

[@andrewferguson6901]

Netcat

[@MK_ZG]

this wallpaper is awesome😍link please !

[@GuyFawkes1]

Crash courseeeeeeeeee! :)

[@skaus2184]

Crash course, or something alike.

[@cristhiamtovar9003]

Crash course please

[@Namazaky]

Crash course

[@SaintFrost11]

Please make a crashcourse on this!

[@malua7021]

crash course

[@miresoman1769]

Bro your hairline is crying.

[@gourabsarker9552]

Sir do you earn 200k dollars a year in USA? Plz reply. Thanks a lot.

[@danielcertan7655]

)))))

[@1337Munkey]

Another way would be to setup ssh without password and monitor ~/.bash_history and get the ip address from /var/logs/auth.log. Interesting idea though. Great video!!

[@patarisac]

that's too risky

[@cvpherhack3r819]

@@patarisac why so?

[@patarisac]

@@cvpherhack3r819 Giving a real SSH session makes it easier for attackers to exploit the system. They can also easily clear or remove the .bash_history

[@ticua07]

@@cvpherhack3r819 you can run any unprivileged command (rm, python3, git, etc) even privileged commands if the hackers find a way to do privilege escalation

[@patarisac]

@@cvpherhack3r819 if hackers are given a real ssh session, it will increase the attack surface. also, they can easily remove the .bash_history, and we can't monitor what they do.

[@bjpoli6526]

Hacker du dimanche surtout 😂😹😹😹🙀😂🤡🤡🤡🤏

[@oildiggerlwd]

Crash course

[@bhargavj9377]

crash course

[@FREE_AT_LAST_SDK]

crash course

[@collinsinfosec]

It's on the way. Currently working on "advanced features" this week. Will start crash course development soon.