How To Configure Honeypot using PentBox in Kali Linux

Well with the help of honeypot, you can easily monitor your own OS and can track every activity of the hacker or you can say that, its the best way to hack the hacker. Every big company is already using smart honeypots in their backend like Google, Facebook and Microsoft because they dont want to compromise.

They actually want to trace all the activities of all the users and if they found any illegal or malicious activity found then honeypot has the capability to block that IP address immediately.

Lets Start Configure Honeypot using PentBox

Step 1 : Check your IP Address using ifconfig Command

Step 2 : Now you can run this tool easily, that give this command ./pentbox.rb and press enter button

Step 3 : Type 2 for Network Tools.

Step 4 : Type 3 for Configure Honeypot.

Step 5 : Type 3 for Fast Auto Configuration.

Step 6 : This opens up a honeypot in port 80. Simply open browser and browse to http://192.168.69.128 (where 192.168.69.128 is your IP Address. You should see an Access denied error.

and in the terminal you should see "HONEYPOT ACTIVATED ON PORT 80" followed by "INTRUSION ATTEMPT DETECTED".

Configure Honeypot using Manual Configuration

Step 1 : Now you can run this tool easily, that give this command ./pentbox.rb and press enter button

Step 2 : Type 2 for Network Tools.

Step 3 : Type 3 for Configure Honeypot.

Step 4 : Now, if you do the same steps but this time select Option 2 (Manual Configuration), you should see more extra options

Step 5 : Do the same steps but select port 23 this time (Telnet Port). Then do a port forwarding in your home router to forward port external port 23 to this machines port 23. Alternatively, set it up in a VPS in your cloud server.

Step 6 : Open the new terminal and in Manual setup the type the command on kali linux terminal telnet 192.168.69.128:23 You will see access denied error, and in the terminal you should see "Stop TechTrick Blog Connection closed by foreign host".

Step 7 : You will see access denied error, and in the terminal you should see "HONEYPOT ACTIVATED ON PORT 23 INTRUSION ATTEMPT DETECTED !".

I hope you enjoyed this article.