Skip to content

v0.33.0 — mysql-honeypotd

Choose a tag to compare

View all tags
@sshpie sshpie released this 26 Aug 00:40
· 8 commits to main since this release
v0.33.0
d9882ac

mysql-honeypotd (sjinks/mysql-honeypotd)

C MySQL honeypot daemon. Uses srand(time(NULL)) seeded once at startup (globals.c:17) and a connection counter starting at 0. thread_id=0 for first connection, 1 for second. Real MySQL thread IDs are non-sequential, start above 1, and vary across restarts.

Signals:

  • Two consecutive connections: thread_id = 0, then 1 (95%)
  • server_version "8.0.19" + thread_id = 0 (80%)
Assets 2
Loading