UDPot updated and new docker

Posted on April 25, 2020 in Tools • Tagged with honeypot, udpot • 1 min read

UDPot is a littel script to run an honeypot which acts as a real DNS server, sending out DNS replies for the first bunch of requests, and after it work as a sinkhole.

In the last days I refreshed the code, updated the requirements and more spring cleaning.

Now a docker image is available on DockerHub, you can run it with:

$ docker run --name udpot -p 5053:5053/udp -p 5053:5053/tcp -d jekil/udpot

It will run UDPot on port 5053 UDP and TCP, if you want to use it on another port you can bind it with …


Continue reading

Homemade custom interaction DNS honeypot

Posted on April 02, 2014 in Tools • Tagged with honeypot, udpot • 2 min read

Time ago I needed a weird DNS honeypot with “some” level of interaction.
I mean an honeypot which acts as a real DNS server, sending out DNS replies  for the first bunch of requests, and after it work as a sinkhole.
I did it in Python and Twisted,  named it with the worst name I was able to catch and published it on Github.

I hope all setup steps are documented in README.md, anyway here is a quick recap.

Check it out from Github and create a virtualenv (you have to install it for example with apt-get install python-virtualenv …


Continue reading