Skip to content
inc0x0
  • Home
  • Networks
    • TCP/IP packets
      • Introduction
      • 1 Recap on network layers and protocols
      • 2 Analysis of a raw TCP/IP packet
      • 3 Manually create and send raw TCP/IP packets
      • 4 Creating a SYN port scanner
    • ICMP/IP packets
      • Ping – Manually create and send ICMP/IP packets
  • Pentesting
    • Budget “USB Rubber Ducky” – Digispark Attiny85
    • Attacking AES CBC non-existent integrity protection
    • How often are my Pastebin pastes read by someone else?
    • Changing your MAC address in Windows
      • Changing your MAC address in Windows (cont.) Python Script
  • Forensics
    • Windows 10 Notification Database
    • Changing your MAC address in Windows
  • Honeypot
    • Multipot – web application honeypot with built-in analysis tools
    • WordPress Brute-Force – by over 100 distinct IP addresses
    • Multipot – Drupal 8 Update
  • Random Tip
  • Blog
  • About
inc0x0

WordPress

Multipot – web application honeypot with built-in analysis tools

2019-06-242019-05-27 by inc0x0

Earlier this year I developed a toy web application honeypot for personal use. Recently I added some more features to it, especially in the analysis section. So here it is: Multipot, a basic web application honeypot with some built-in analysis tools. Multipot Multipot is a small web application honeypot written in Python 3, simulating a … Read more

Categories Honeypot Tags brute-force, honeypot, login, multipot, password guessing, python, WordPress

WordPress Brute-Force – by over 100 distinct IP addresses

2019-05-102019-05-10 by inc0x0

When playing around with a small web honeypot I’m developing, I noticed an interesting brute-force attack on a test deployment. There were 267 password guessing attacks on the WordPress section of the honeypot in the last 24 hours. They were equally distributed between the wp-login.php (default login via browser) being attacked 137 times and the … Read more

Categories Honeypot Tags brute-force, honeypot, login, multipot, password guessing, WordPress

Archives

  • October 2019
  • June 2019
  • May 2019
  • February 2019
  • January 2019
  • October 2018
© 2023 inc 0x0
  • Home
  • Networks
    • TCP/IP packets
      • Introduction
      • 1 Recap on network layers and protocols
      • 2 Analysis of a raw TCP/IP packet
      • 3 Manually create and send raw TCP/IP packets
      • 4 Creating a SYN port scanner
    • ICMP/IP packets
      • Ping – Manually create and send ICMP/IP packets
  • Pentesting
    • Budget “USB Rubber Ducky” – Digispark Attiny85
    • Attacking AES CBC non-existent integrity protection
    • How often are my Pastebin pastes read by someone else?
    • Changing your MAC address in Windows
      • Changing your MAC address in Windows (cont.) Python Script
  • Forensics
    • Windows 10 Notification Database
    • Changing your MAC address in Windows
  • Honeypot
    • Multipot – web application honeypot with built-in analysis tools
    • WordPress Brute-Force – by over 100 distinct IP addresses
    • Multipot – Drupal 8 Update
  • Random Tip
  • Blog
  • About