In this subject we will follow a step by step instruction of installing an Industrial Control System honeypot. We will use CONPOT. The URL for it is
http://conpot.org and for documentation check:
https://github.com/mushorg/conpot/tree/master/docs.
The default configuration of Conpot simulates a basic “Siemens SIMATIC S7-200 PLC” with an input/output module and a CP 443-1 which would be needed in a real setup to provide network connectivity.
To install conpot run the commands below in a linux (Debian, Ubuntu, etc.)
$ sudo -i# apt-get install libsmi2ldbl snmp-mibs-downloader python-dev libevent-dev libxslt1-dev libxml2-dev# apt-get install python-pip# easy_install -U setuptools# apt-get install mysql-server (if you will use it)# apt-get install python-mysqldb# pip install conpot
Use the code below to run with default config:
# conpot -t default
Here is a screenshot of a successful run:
If you want to make changes here are the details:
config file:
/usr/local/lib/python2.7/dist-packages/conpot/conpot.cfgdefault xml file:
/usr/local/lib/python2.7/dist-packages/conpot/templates/default/template.xml
