This script sets up a Redis and Nginx honeypot environment to simulate vulnerable services for monitoring and analysis purposes.
su -
curl -s https://raw.githubusercontent.com/r648r/DirtyNginx/refs/heads/main/h.sh -o install.sh
bash install.sh
- Automated Setup
- Installs dependencies like Redis, Nginx, and OpenSSL.
- Creates and configures honeypot services.
- Redis Honeypot
- Isolated service user for Redis.
- Simulates a database with fake user, product, and order data.
- Locks down sensitive Redis commands for realistic behavior.
- Configures systemd service files with strict permissions.
- Nginx Honeypot
- Generates SSL certificates for HTTPS configurations.
- Serves multiple static and API error pages.
- Fake HTTP Headers with vulnerable version (PHP, Varnish, Nginx, Symfony)
- Embeds JavaScript calls to external tracking endpoints.
- Deception Modules
- Integrates with FortiDeceptor tools for enhanced deception.
- Log Management
- Clears and replaces logs and histories to obfuscate setup traces.
- Operating System:
Ubuntu 20.04
see why - Internet Access
- Root Privileges
Your contributions are always appreciated — feel free to help!