Honeypots mailing list archives

Re: Oracle DB honeypot?


From: "Krzysztof Cabaj" <kcabaj () gmail com>
Date: Sat, 10 Jun 2006 11:29:14 +0200

Hi,

Does anybody have idea how to organize Oracle DB honeypot, to attract crackers to
Listener service, iSQL*Plus service, etc?
It's easy to install Oracle DB, start network sniffer and wait, but how to attract anyone?
Try making some "fake", simple system using DB ... maybe some forum or
guestbook. Then link it to normal/working portal or some wide
accessible web page?

I think in Know Your Enemy paper or book this kind of honeypot are discussed.

Best regards,
Krzysztof (Christopher) Cabaj


Current thread: