Security - Prakhar Shukla

Prakhar Shukla

Sign in

Security

A collection of 5 posts

DNS Hijacking

Some days ago I stumbled on the some text, which explained that a lot of firmware lately bypasses your supplied DNS server with something that they trust. And this is specially true in malware. And I had been wondering what can I do to minimize this. And this is where

Cowrie as HoneyPot on my Router

Cowrie as HoneyPot on my Router

Running cowrie has been a fun little side project I've been on since quite some time. Setting up and running cowrie is quite simple. One basic thing I'd recommend is to use correct network and system isolation. I prefer a physical host with separate everything. I

More Malware Updates

More Malware Updates

So this is just a regular update on the malwares I captured using my Honeypot. Ever since I've upgraded the security measures (`banIP`+`snort3`), the number of hits are pretty low. Thus the updates this time are pretty boring. Bots are also advanced at this level and tend

banIP - OpenWRT IP List Blocker

banIP - OpenWRT IP List Blocker

So I host a HoneyPot to test whether how many attacks I get per day and what security measures are able to block it. And I started with Snort3 in IDS mode which allowed to detect malicious activity. After I switched to IPS, I noticed that while miscellaneous attacks had

Running SSH on Port 22 vs 2222

Running SSH on Port 22 vs 2222

So I host a SSH server Honeypot on my public IP and I thought to myself - How big a difference is running the service on port 22 vs 2222. Is this single step a big enough hurdle to consider it better? And of course, like everything else in my