Skip to content
master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

HoneyCast

A honeypot to collect media mistakenly or purposely streamed to Chromecast devices on the internet.

Why

During the "casthack", a couple of cast-enabled devices on the public internet were attacked to stream videos of a famous YouTube personality. [1] [2]

This project aims to work with pychromecast, a Python implementation of the Chromecast client API. So anyone scanning the internet and connecting to this honeypot shall think this is an actual device and do their shenanigans there.

Usage

The Makefile provides a few helpful scripts, such as setting up a virtual environment for development. Once everything's setup, you can use a few command line flags to disable certain services from honeycast:

(venv) $ ./app.py --help
Usage: app.py [options]

Options:
  -h, --help     show this help message and exit
  --no-web       Don't start eureka webserver
  --no-zeroconf  Don't advertise using zeroconf
  --no-cast      Don't run a cast server

Honeycast ships with a Dockerfile, which generates very plain, self-signed X509 certificates during build. You can specify your own certificates in the config.

License

Honeycast is released under the MIT license.

References

[1] - The Original Website describing the Hack
[2] - Testimony of Hacker Giraffe

About

📺 Honeypot for casting media to a Google Chromecast

Topics

Resources

License

Releases

No releases published

Packages

No packages published