OWASP WASC Distributed Web Honeypots Project - Revision history

Rcbarnett at 13:59, 6 April 2015

2015-04-06T13:59:51Z

Rcbarnett at 20:47, 31 March 2015

2015-03-31T20:47:35Z

Rcbarnett at 20:46, 31 March 2015

2015-03-31T20:46:06Z

Rcbarnett at 20:45, 31 March 2015

2015-03-31T20:45:34Z

Rcbarnett at 19:51, 31 March 2015

2015-03-31T19:51:53Z

Rcbarnett at 19:49, 31 March 2015

2015-03-31T19:49:51Z

Rcbarnett at 23:32, 24 February 2014

2014-02-24T23:32:02Z

Rcbarnett at 23:25, 24 February 2014

2014-02-24T23:25:34Z

Samantha Groves: Created page with "=Main=
link=
{| style="padding: 0;margin:0;margin-top:10px;t..."

2014-02-22T01:30:18Z

Created page with "=Main= <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">link=</div> {| style="padding: 0;margin:0;margin-top:10px;t..."

New page

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP WASC Distributed Web Honeypots Project==

The goal of the OWASP WASC Distributed Web Honeypots Project is to identify emerging attacks against web applications and report them to the community including automated scanning activity, probes, as well as, targeted attacks against specific web apps.

==Introduction==

Write a short introduction

==Description==

Write a description that is just a few paragraphs long

==Licensing==

The OWASP WASC Distributed Web Honeypots Project is free to use. It is licensed under the Apache 2.0 License.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is the OWASP WASC Distributed Web Honeypots Project? ==

The OWASP WASC Distributed Web Honeypots Project provides:

* xxx
* xxx

== Presentation ==

Link to presentation

== Project Leader ==

Ryan Barnett

== Related Projects ==

* [[OWASP_CISO_Survey]]

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

* Link to page/download

== News and Events ==
* [20 Nov 2013] News 2
* [30 Sep 2013] News 1

== In Print ==
This project can be purchased as a print on demand book from Lulu.com

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=]]
|}

|}

=FAQs=

; Q1
: A1

; Q2
: A2

= Acknowledgements =
==Volunteers==
The OWASP WASC Distributed Web Honeypots Project is developed by a worldwide team of volunteers. The primary contributors to date have been:

* xxx
* xxx

==Others==
* xxx
* xxx

= Road Map and Getting Involved =
As of February 2014, the priorities are:

The main roadmap item is to solicit more participants to deploy Sensors to collect data.
The main deliverables for this project are: 1) Real-world web attack data, 2) Real-time web attack data and 3) Technical details that can be leveraged by the OWASP Defenders community to help protect their websites. Think of this project as somewhat similar to the SANS Dshield project where the community correlates data and can also obtain reputation services for blocking IP addresses, etc...

Involvement in the development and promotion of XXX is actively encouraged!
You do not have to be a security expert in order to contribute.
Some of the ways you can help:
* xxx
* xxx

=Project About=
{{:Projects/OWASP_WASC_Distributed_Web_Honeypots_Project}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

@@ Line 52: / Line 52: @@
 == Quick Download ==
-* [http://projects.webappsec.org/w/file/fetch/94619066/Owasp-honeypot-v1.zip?force_download=1 Link to download Honeypot VM (ZIP)]
+* [http://projects.webappsec.org/w/file/fetch/94619066/Owasp-honeypot-v1.zip?force_download=1 Honeypot VMware Image (ZIP)]
+* [http://projects.webappsec.org/w/file/fetch/94775630/Owasp-honeypot-v1-OVF.zip?force_download=1 Honeypot OVF Image (ZIP)]

@@ Line 39: / Line 39: @@
 == Project Leader ==
-* Ryan Barnett
+* [https://www.owasp.org/index.php/User:Rcbarnett Ryan Barnett]
 == Mailing List ==

@@ Line 37: / Line 37: @@
 * [http://prezi.com/dvvv2gdpezzz/wasc-projects-overview/ Web Hacking Intelligence Gathering (Prezi)]
 * [http://www.owasp.org/images/c/c5/OWASP-WASCAppSec2007SanJose_WASCOpenProxyHoneyPotUpdate.ppt Open Proxy Honeypot Project Update (2007)]
 == Project Leader ==
+* Ryan Barnett
 == Mailing List ==

← Older revision		Revision as of 20:45, 31 March 2015
Line 48:		Line 48:
	* [http://lists.owasp.org/pipermail/owasp_wasc_distributed_web_honeypots_project/ Archive]		* [http://lists.owasp.org/pipermail/owasp_wasc_distributed_web_honeypots_project/ Archive]

		+	== Twitter ==
		+	* [https://twitter.com/OwaspHoneypots @OwaspHoneypots]

	\| valign="top" style="padding-left:25px;width:200px;" \|		\| valign="top" style="padding-left:25px;width:200px;" \|

← Older revision		Revision as of 19:51, 31 March 2015
Line 53:		Line 53:
	== Quick Download ==		== Quick Download ==

−	* Link to ~~page/~~download	+	* [http://projects.webappsec.org/w/file/fetch/94619066/Owasp-honeypot-v1.zip?force_download=1 Link to download Honeypot VM (ZIP)]

@@ Line 123: / Line 123: @@
 The OWASP WASC Distributed Web Honeypots Project is developed by a worldwide team of volunteers. The primary contributors to date have been:
-* xxx
+* Felipe Costa
-* xxx
+* Chaim Sanders
 ==Others==
-* xxx
-* xxx
 = Road Map and Getting Involved =
-As of February 2014, the priorities are:
+As of April 2015, the priorities are:
-The main roadmap item is to solicit more participants to deploy Sensors to collect data.
+The main roadmap item is to solicit participants to deploy Sensors to collect data.
 The main deliverables for this project are: 1) Real-world web attack data, 2) Real-time web attack data and 3) Technical details that can be leveraged by the OWASP Defenders community to help protect their websites. Think of this project as somewhat similar to the SANS Dshield project where the community correlates data and can also obtain reputation services for blocking IP addresses, etc...

@@ Line 82: / Line 82: @@
 |}
 =FAQs=
-; Q1
+; Are there any legal issues I should be concerned with?
-: A1
+: The short answer is '''yes''' - if you choose to run your honeypot as an open proxy server. There are some legal issues to be aware of in this type of honeypot setup where we will be capturing third party user information.  The Honeynet Project has excellent information on the challenges and issues surrounding due diligence in deploying honeypots/honeynets. Refer to this paper on Honeynets. In their book Know Your Enemy they have an entire chapter dedicated to Legal Issues.  It is this concern over increased risk why we expanded the project scope to allow for deployment of stand alone web sites instead of running it as an open proxy.
-; Q2
+* [https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual ModSecurity Reference Manual]
-: A2
+* [https://github.com/SpiderLabs/ModSecurity/wiki/ModSecurity-2-Data-Formats ModSecurity Audit Log Format]
 = Acknowledgements =

@@ Line 12: / Line 12: @@
 ==Introduction==
-Write a short introduction
+The goal of the Distributed Web Honeypot (DWH) Project is to identify emerging attacks against web applications and report them to the community.  This may include automated scanning activity, probes, as well as, targeted attacks against specific web sites or applications.  The scope of this project has recently been expanded to include deployment of both standard web application honeypots and/or open proxy honeypots.  Project participants may choose whether they want to run their honeypot as an open proxy or a stand-alone sensor.
 ==Description==
-Write a description that is just a few paragraphs long
+This project fills a need in the web application Defender's community to have detailed data about mass web application scanning attacks such as those being operated by Botnets.  This project will provide detailed data about attacks and their origins.
@@ Line 32: / Line 30: @@
 The OWASP WASC Distributed Web Honeypots Project provides:
-* xxx
+* Real-time, detailed Web Application Attack Data
-* xxx
+* Threat Reports to the community
 == Presentation ==
-Link to presentation
+* [http://prezi.com/dvvv2gdpezzz/wasc-projects-overview/ Web Hacking Intelligence Gathering (Prezi)]
+* [http://www.owasp.org/images/c/c5/OWASP-WASCAppSec2007SanJose_WASCOpenProxyHoneyPotUpdate.ppt Open Proxy Honeypot Project Update (2007)]
@@ Line 48: / Line 44: @@
-== Related Projects ==
+== Mailing List ==
+* [https://lists.owasp.org/mailman/listinfo/owasp_wasc_distributed_web_honeypots_project Sign-up]
-* [[OWASP_CISO_Survey]]
+* [http://lists.owasp.org/pipermail/owasp_wasc_distributed_web_honeypots_project/ Archive]
@@ Line 63: / Line 58: @@
 == News and Events ==
-* [20 Nov 2013] News 2
+* [http://www.internetnews.com/security/article.php/3832131/WASC+Honeypot+Opens+Up+With+Open+Source.htm WASC Honeypot Opens Up With Open Source (InternetNews)]
-* [30 Sep 2013] News 1
+* [http://news.techworld.com/security/10663/researchers-eye-open-proxy-attacks/ Researchers eye open-proxy attacks (TechWorld)]