News for hackers. Stuff that matters.

A comment on Learn from your attackers with a high interactivity SSH Honey Pot. Parent comment

Re:Learn from your attackers with a high interactivity SSH H... by frequentnapper on Saturday January 04, 2020 @01:45AM (#21953323)
in this case: check if a directory /home/honssh exists to detect that it's a honeypot?
[ Parent | on HN ]
Re:Learn from your attackers with a high interactivity SSH H... by robputt796 on Saturday January 04, 2020 @03:29AM (#21953686)
I think this would not work because the HonSSH server with the HonSSH user is hosting a proxy service. The user gets dumped into an actual vanilla looking Linux host at the backend.
[ Parent | on HN ]