github項目地址:https://github.com/Cymmetria/StrutsHoneypot.
StrutsHoneypot is an Apache 2 based honeypot that includes a seperate detection module (apache mod) for Apache 2 servers that detects and/or blocks the sturts CVE 2017-5638 exploit. It is released under the MIT license for the use of the community.
StrutsHoneypot是一個基于Apache 2的蜜罐搞监,包含用于Apache 2服務器的獨立檢測模塊(apache mod)红伦,用于檢測和阻止CVE 2017-5638利用的sturts蜜罐货岭。
如果你非常感興趣的話可以嘗試社區(qū)版:https://community.cymmetria.com/
這里在ubuntu下使用docker部署:
$~ git clone https://github.com/Cymmetria/StrutsHoneypot.git
$~ cd StructsHoneypot
$~ docker build -t struts_honeypot strutspot_docker/
$~ docker run -p 8888:80 --name "mystrutspot_docker" -d struts_honeypot
訪問日志文件:
$~ docker exec -t -i mystrutspot_docker cat /var/log/apache2/error.log
當然還有另外一種安裝方式mod_contentrap,這里不再詳述苏章。快使用你的exp嘗試一下吧~>-<