From efefd0fb85e909d4b451414149db5aed6bcbd727 Mon Sep 17 00:00:00 2001 From: Mario Date: Sun, 29 May 2022 17:05:42 +0200 Subject: [PATCH] Configured Wordpress honeypot --- configurations/services/http-80.yaml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/configurations/services/http-80.yaml b/configurations/services/http-80.yaml index 168e973..bc7ffeb 100644 --- a/configurations/services/http-80.yaml +++ b/configurations/services/http-80.yaml @@ -2,17 +2,17 @@ apiVersion: "v1" protocol: "http" address: ":80" commands: - - regex: "microtick" - handler: "\r\n\r\n\r\n\r\n\r\nRouterOS router configuration page\r\n\r\n\r\n\r\n\r\n\r\n\r\n
\r\n\r\n
\r\n \r\n\r\n
\r\n \r\n\t\t

RouterOS v6.42.12

\r\n \r\n

You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator.

\r\n \r\n \r\n\t

WebFig Login:

\r\n
Login: \r\n\t \r\n \r\n
Password: \r\n\t
\r\n\t
\r\n
\r\n \r\n
\r\n
\r\n \t
\r\n \r\n
\r\n \r\n
\r\n \t
\r\n \r\n
\r\n\r\n \r\n \r\n
\r\n \t
\r\n \r\n
\r\n \r\n \r\n
\r\n \t
\r\n \r\n
\r\n \r\n\t\t\t
\r\n \t
\r\n \r\n
\r\n\r\n
\r\n \r\n
\r\n
© mikrotik
\r\n\r\n
\r\n
\r\n\r\n\r\n\r\n\r\n\r\n" + - regex: "index.php" + handler: "test – Just another WordPress site
" headers: - "Content-Type: text/html" - - "Expires: 0" - - "Version: 6.42.12" + - "Server: Apache/2.4.53 (Debian)" + - "X-Powered-By: PHP/7.4.29" statusCode: 200 - - regex: "hello" - handler: "world!" + - regex: "wp-login.php" + handler: "Log In ‹ test — WordPress

Powered by WordPress

Lost your password?

← Go to test

" headers: - "Content-Type: text/html" - - "Expires: 0" - - "Version: 6.42.12" - statusCode: 500 \ No newline at end of file + - "Server: Apache/2.4.53 (Debian)" + - "X-Powered-By: PHP/7.4.29" + statusCode: 200 \ No newline at end of file