This is a full beginners guide on Honeypots , we will be explaining the types of Honeypots, how are they deployed, who uses them, and so on.

1. Honey Pots
Hussein Muhaisen AKA System Exploited
1
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

2. What are honey
pots?
•Honey pots are basically decoy ( fake )
systems deployed by people , organizations
and other entities to log user activity and
the way they approach the system to hack
it or do any other activity on it.
2
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

3. Honey pot illustration
3
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

4. why are honey
pots deployed?
•The simple answer is that honey
pots are deployed for people/orgs to
study how an attacker behaves
, examine his moves, and
sometimes they are deployed for
other uses like confusing the
attacker. 4
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

5. A basic working
of a honeypot
•Logs users' IP address.
•Keystrokes submitted by the user.
•The resources the user has accessed,
modified, and deleted.
•and a lot of other things! Really ,
you can configure your honeypot to
act based on your needs 5
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

6. Types of honeypots
•Low-interaction honeypots.
•Medium-interaction honeypots.
•High-interaction honeypots.
•Pure honeypots.
6
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

7. Low-Interaction Honeypots
•These types of honeypots run on limited
services , and have restricted permissions, they
can be used to track UDP,TCP,IICMP and other
protocols/services . 7
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

8. Medium-Interaction Honeypots
•These types of honeypots are based on real-time functioning
operating systems they have the same services as the real
application, the purpose of this honey pot is to collect more
information on the attack, and so the organization can take
extra time when mitigating the attack. 8
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

9. High-Interaction
Honeypots
•These types of honeypots are real
applications but they are
vulnerable, these are hard to
maintain but the success rates are
high.
9
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

10. Pure Honeypots
•These honeypots are deployed on real working environments ! Yes real ones,
so once the attacker sees it he will directly spend time enumerating and
epxloiting it once he does the organization will be alerted, and like that they
knew the attackers ways of attacking the machine, and they will prevent
future attacks like this.
10
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

11. Honey pots deployments
Honey pots have different types and these
types are:
Email Honeypots -->
Inactive emails waiting for the malicious actor
to send an email, then later analyze the
malicious email sent by the attacker.
Malware Honeypots --> used to
trap malware in the network, then later
analyzed by the ORG.
Database Honeypots --> these
honeypots act as a vulnerable database which
lures attackers into thinking the database is
vulnerable and it has credit cards
for example.
Spider Honeypots --> these
Honeypots are used to stop web crawlers that
crawl the internet for a certain malicious
purpose.
11
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

12. How to
setup
honeypots
• By the timeyou see this I Will have a video uploaded on my channel on
how to do it youtube.com/SystemExploited
So these are honeypots you can download:
- DigitalOcean offers a honeypot service
- Cowrie
- HoneyPy
- Honeynet
- Honeytrap
-Specter
-KFsensor
This is a curated list of honeypots
https://github.com/paralax/awesome-honeypots
12
This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein

13. This slide was made with love by Hussein Muhaisen AKA SystemExploited AKA
atoncehussein
13