一个轻量级Web蜜罐 - A Little Web Honeypot.🍯🍯🍯🐝🐝🐝

Related tags

Security honeypot loki
Overview

Loki

Releases下载:https://github.com/TheKingOfDuck/Loki/releases/tag/0.1

更新日志

  • 20210107 实现多端口监听
  • 20210103 实现动态配置相关页面
  • 20210124 实现配置指定端口指向指定模板文件
  • 20210131 捕获所有数据,基本功能实现。修改默认页面。

技术栈

springboot + thymeleaf + sqlite

  • 自定义注解
  • 全局异常捕获,404捕获
  • 多端口多页面
  • 后台指定端口配置

使用

编辑application.yml修改默认后台,端口,账号密码等配置,然后执行java -jar loki.jar启动项目。

了解更多: https://thekingofduck.github.io/post/loki-web-honeypot/

server:
  port: 80
  #多端口配置
  multiPorts: 81-90,7000-10000,65535
  ssl:
    enabled:
      false                             #SSL协议配置开开关
    key-store:
      loki.keystore
    key-alias:
      loki
    key-store-password:
      loki@2333
    key-store-type:
      JKS

spring:
  #出现错误时, 直接抛出异常(便于异常统一处理,否则捕获不到404)
  mvc:
    throw-exception-if-no-handler-found: true
    static-path-pattern: /**


  web:
    resources:
      add-mappings: false
  datasource:
    url: jdbc:sqlite:data/loki.db # 创建的sqlite数据库所在路径
    username: # 因为没有用户名和密码,所以这两个参数就没有值
    password:
    driver-class-name: org.sqlite.JDBC # sqlite驱动
  thymeleaf:
    prefix: classpath:/templates/


# mybatis配置
mybatis:
  mapper-locations: classpath:mybatis/mapper/*Mapper.xml # 配置mapper.xml文件路径
  type-aliases-package: net.thekingofduck.loki.entity # 实体类包名


loki:
  adminPath: lokiadmin                  #后台路径 http://HOST:ADMINPORT/ADMINPPATH
  adminPort: 65535                      #后台端口 这个端口如果不在上面的端口列表里则后台无法访问
  username: loki                        #后台路径 http://HOST:ADMINPORT/ADMINPPATH
  password: loki@2333                   #后台路径 http://HOST:ADMINPORT/ADMINPPATH
  templates: /resources/templates/      #模板渲染的路径 在jar包同级目录
  statics: /resources/statics/          #模板静态资源(images,js,css)的路径 在jar包同级目录

templates:
  list:
    default:
      - maps: {
        port: '80',
        path: 'default/index.html',
        code: '200',
        header: {
          X-Powered-By: "PHP/5.4.7",
          Server: "phpstudy"
        },
        respbody: 'error',
      }
    tongda:
      - maps: {
        port: '8080',
        path: 'tongda/index.html',
        code: '200',
        header: {
          Set-Cookie: "phpsession=123",
          Server: "apache"
        },
        respbody: 'error',
      }
    seeyon:
      - maps: {
        port: '8090',
        path: 'seeyon/index.html',
        code: '200',
        header: {
          Set-Cookie: "jsessionid=123",
          Server: "nginx"
        },
        respbody: 'error',
      }

待处理

  • 自定义报错
You might also like...

A Java program for web spidering.

JSpider JSpider is an advanced, multi-threaded Java library for crawling websites. It can be used as a command line program with all it's primary feat

Nov 5, 2022

Bridging IOTA's self-sovereign identities to existing "Web 2.0" OAuth solutions

Bridging IOTA's self-sovereign identities to existing

IOTA Identity Provider Bridging IOTA's self-sovereign identities to existing "Web 2.0" OAuth solutions. NOTE: This plugin has NOT been audited or test

Nov 7, 2022

Just a fun little word game! 🍄

Just a fun little word game! 🍄

Wordagam A fun & interactive word game. Check out the screenshots and the gameplay video. Download & Play Download the latest artefacts here. You can

Dec 24, 2022

a little project that will help you get in jail

Heftgen [ˈhɛftçən] ausgesprochen: Heftchen Development Install this npm module globally (https://www.npmjs.com/package/git-conventional-commits) Enabl

Jun 26, 2021

Makes the hotbar a little bit bigger.

LargeBar A mod that doubles the size of the vanilla hotbar, from 9 slots to 18. It doesn't add any extra inventory slots, it just uses some that alrea

Nov 18, 2022

A little of Java content every day for a hundred days.

100 Days of Java Table of Contents Day 1 - Generating a random number within a specific range. Day 2 - Formatting a LocalDateTime object. Day 3 - Sche

Dec 27, 2022

A little template project to

A little template project to

FX Modules This is a little project that can be used as a template for modularized JavaFX projects. The main branch is based on JDK17, other version c

Dec 12, 2022

Nrich is a Java library developed at CROZ whose purpose is to make development of applications on JVM a little easier.

nrich Nrich is a Java library developed at CROZ whose purpose is to make development of applications on JVM a little easier. It contains modules that

Nov 12, 2022

JDKMon - A little tool written in JavaFX that monitors your installed JDK's and inform you about updates

JDKMon - A little tool written in JavaFX that monitors your installed JDK's and inform you about updates

JDKMon JDKMon Home JDKMon is a little tool written in JavaFX that tries to detect all JDK's installed on your machine and will inform you about new up

Jan 3, 2023

Neat little additions to AE2: Fabric

AE2Things Neat little additions to AE2: Fabric This mod adds two machines from AE2Stuff the Advanced Inscriber and Crystal Growth Chamber, and a new t

Jun 18, 2022

This is a little self hosted shared planner application server.

VPR-Backend This project includes the backend for the VPR-project. Installation and Getting Started To run the server you first have to install a MySQ

Feb 5, 2022

Fun little program to generate worlds in Excel

Basic world generation for Excel! How to use (For windows): Download the latest release from Releases run java -jar WorldGenExcelVersion.jar "path_to_

Feb 12, 2022

A little container and simulator for Complex Adaptive Systems (CAS)

Complex Adaptive Systems Description This is a little container and simulator for Complex Adaptive Systems (CAS). CAS are typically living Complex Sys

Feb 13, 2022

A little tool that converts SVG paths to JavaFX paths

SVGPathConverter The SVGPathConverter is a little tool that helps you converting SVG paths to JavaFX paths. It has two methods, one to format a SVG pa

Dec 29, 2021

A little helper to complete homework #4 "Graph planarization" in discrete mathematics at ITMO University in the second semester.

A little helper to complete homework #4

graph_planarization A little helper to complete homework #4 "Graph planarization" in discrete mathematics at ITMO University in the second semester. A

Dec 8, 2022

Firefly is an asynchronous web framework for rapid development of high-performance web application.

What is Firefly? Firefly framework is an asynchronous Java web framework. It helps you create a web application Easy and Quickly. It provides asynchro

Dec 18, 2022

JSON Web Token (JWT) implementation for Java with support for signatures (JWS), encryption (JWE) and web keys (JWK).

Nimbus JOSE+JWT Nimbus JOSE+JWT is a popular open source (Apache 2.0) Java library which implements the Javascript Object Signing and Encryption (JOSE

Jul 1, 2022

An evolving set of open source web components for building mobile and desktop web applications in modern browsers.

Vaadin components Vaadin components is an evolving set of high-quality user interface web components commonly needed in modern mobile and desktop busi

Dec 31, 2022

This repository is related to the Java Web Developer (ND035), Course - Web Services and APIs

About this Repository This repository is related to the Java Web Developer (ND035), Course - Web Services and APIs It contains the following folders:

Jan 28, 2022
Comments
  • Java 1.8 error

    Java 1.8 error

    ➜ loki
    ➜ loki java -jar loki.jar
    ██╗ ██████╗ ██╗ ██╗██╗ /**
    ██║ ██╔═══██╗██║ ██╔╝██║ * @NAME Loki
    ██║ ██║ ██║█████╔╝ ██║ * @VERSION 0.0.1
    ██║ ██║ ██║██╔═██╗ ██║ * @AUTHOR CoolCat
    ███████╗╚██████╔╝██║ ██╗██║ * @GITHUB https://github.com/TheKingOfDuck
    

    logfile : error.txt http://91io.cn/s/xBgK7f7/error.txt

    Valid for seven days

    SHA1  error.txt
    0a263b05e89f91d24fa33639e47e0af1746eba98
    
    opened by Ran-Xing 1
Releases(0.2)
Owner
鸭王
Infosec Researcher|Security Developer|Java|C#|Golang|C++
鸭王
Java JWT: JSON Web Token for Java and Android

Java JWT: JSON Web Token for Java and Android JJWT aims to be the easiest to use and understand library for creating and verifying JSON Web Tokens (JW

null 8.8k Dec 30, 2022
Jwks RSA - JSON Web Key Set parser.

jwks-rsa Install Maven <dependency> <groupId>com.auth0</groupId> <artifactId>jwks-rsa</artifactId> <version>0.17.0</version> </dependency>

Auth0 158 Dec 30, 2022
JAP is an open source authentication middleware, it is highly decoupled from business code and has good modularity and flexiblity. Developers could integrate JAP into web applications effortlessly.

?? JAP 是什么? JAP 是一款开源的登录中间件,基于模块化设计,并且与业务高度解耦,使用起来非常灵活,开发者可以毫不费力地将 JAP 集

Fujie 140 Dec 1, 2022
Unofficial Clubhouse web app client. For personal use only. It's a personal open-source project and not affiliated with any company.

Purpose of this web app That's a personal project and not affiliated with any company. This is the web client app to make your Club House experience b

Sergei Ovchinnikov 45 Nov 15, 2022
Arkhota, a web brute forcer for Android.

Arkhota, a web brute forcer for Android What? Arkhota is a web (HTTP/S) brute forcer for Android. Why? A web brute forcer is always in a hacker's comp

ALW1EZ 55 Jan 6, 2023
Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications)

BFAC - Burp Extension Burp Extension for BFAC (Advanced Backup-File Artifacts Testing for Web-Applications). What is BFAC - Burp Extension ? Backup fi

SEC-IT 18 Jul 16, 2022
🟪 TommyBox is a single-file executable that makes it possible to launch web apps on a desktop.

?? TommyBox About: TommyBox is a standalone executable container that makes it possible to launch static and dynamic web apps on a desktop by providin

null 19 May 28, 2022
2211-01-a-OMW2PCAFYB's Web Checkers Project

WC-2211-01-a-OMW2PCAFYB 2211-01-a-OMW2PCAFYB's Web Checkers Project This is the Web Checkers Project as established by SWEN-261 @ RIT Link to page: ht

Aidan Mellin 2 Oct 21, 2021
Anonymous chatting web app

Innogl This project is an anonymous web and video chat with strangers. Users can choose an online companion to discuss anything, find new friends or d

null 15 Oct 22, 2022
ByteSkriptQuery - A library for deploying ByteSkript as a backend web technology.

ByteSkriptQuery A language library for ByteSkript that allows it to be deployed as a backend web language. Not only does this allow the creation of ad

null 1 Jan 4, 2022