HoneyDrive_3基础学习-创新互联

20161219 08:51——09:30

 这篇博文记录HoneyDrive_3_Royal_Jelly（1）系统应用整体的简介和（2）初期准备或相关具体功能的介绍说明，和（3）HoneyDrive_3的基本使用或基础理论。

参考：HoneyDrive （全局性介绍HoneyDrive的文章，不偏不倚）
    https://bruteforce.gr/honeydrive

一、系统应用整体的简介

参考： http://bruteforce.gr/honeydrive-3-royal-jelly-edition.html

HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance (OVA) with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction honeypot, Glastopf web honeypot and Wordpot, Conpot SCADA/ICS honeypot, Thug and PhoneyC honeyclients and more. Additionally it includes many useful pre-configured scripts and utilities to analyze, visualize and process the data it can capture, such as Kippo-Graph, Honeyd-Viz, DionaeaFR, an ELK stack and much more. Lastly, almost 90 well-known malware analysis, forensics and network monitoring related tools are also present in the distribution.
20161219 11:10——12:39

What you need to know (PLEASE READ):

1) HoneyDrive 3 has been created entirely from scratch. It is based on Xubuntu Desktop 12.04.4 LTS edition and it is distributed as a standalone OVA file that can be easily imported as a virtual machine using virtualization software such as VirtualBox and VMware.

2) All the honeypot programs from the previous version of HoneyDrive are included, while they have also been upgraded to their latest versions and converted almost entirely to cloned git repos for easier maintenance and updating. This latter fact on its own could be considered reason enough to release the new version.

3) Many new honeypot programs have been installed that really make HoneyDrive 3 “complete” in terms of honeypot technology, plus around 50(!) new security related tools in the fields of malware analysis, forensics and network monitoring.

4) The main honeypot software packages and BruteForce Lab’s projects reside in /honeydrive. The rest of the programs reside in /opt. The location of all software can be found inside the README.txt file on the desktop.

5) HoneyDrive 3 doesn’t make itself as known to the outside world as the previous version. There are no descriptive messages and apart from Kippo-Graph and Honeyd-Viz every other piece of software is not accessible from the outside (unless if you configure them otherwise, or even lock down Kippo-Graph and Honeyd-Viz as well).

A note on versioning: previous versions of HoneyDrive started with a zero (0.1 and 0.2) which seemed confusing to some. I didn’t like it either and in the end I decided to “renumber” those as versions 1 and 2, essentially making this new version HoneyDrive 3, .i.e the third official release.

二、HoneyDrive使用前的初期准备或相关具体功能的介绍说明

参考：HoneyDrive 3 VMware guide
        https://bruteforce.gr/honeydrive-3-vmware-guide.html

 Here is a step by step guide for converting the HoneyDrive 3 OVA file to a VMware-compatible virtual machine. The procedure should be the same for all the other VMware products as well (Workstation, ESXi, etc). Instructions:

2.1 HoneyDrive_3在VMware中使用的前期准备工序：

（1）.下载OVF Tool （：Download OVF Tool 3.5.2 (needs a free account registration）from: https://my.vmware.com/web/vmware/details?downloadGroup=OVFTOOL352&productId=352

（2）. 安装、运行OVF Tool，将OVA格式文件转换为VMX格式，（Convert HoneyDrive OVA to VMX）

（3）.将VMX格式文件（Honey）导入到vmware中，通过双击.vmx文件的方式（Import/open the new virtual machine by double clicking the .vmx file.）。

（4）.在HoneyDrive virtual machine中的终端界面里卸载VirtualBox Guest Additions（Inside the HoneyDrive virtual machine, open Terminator (on the desktop) and type the following to uninstall the VirtualBox Guest Additions）：

另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。