What is a honeypot?

Honeypot is a special software which simulates an operating system and allows an attacker to log in via SSH or telnet and execute commands or download malware. Commands are recorded and used to analyze the behavior. Malware can be analyzed as well.

How does it work?

Volunteers interested in joining the research will register on this site and add the first device to get an identification token.

You install and run the HaaS proxy application, which forwards incoming traffic from port 22 (commonly used for SSH) to the HaaS server, where Cowrie honeypot simulates a device and records executed commands.