Admin CP Honeypot
The MyBB Admin CP Honeypot is a fake /admin/ directory that looks and acts just like the real thing. The difference? It doesn't actually "work".
Attackers will be faced with an eternal "Wrong username/password" error and will hopefully get discouraged. In addition, the login details that they use in addition to their IP address will be emailed to you, so you can take appropriate action against them.
--------
Admin CP Honeypot Security Features:
- Looks and acts just like the real Admin CP (down to the Source whitespace)
- Mimics the exact file structure of the /admin/ directory, and outputs the same HTML source code.
- Emails the attacker's login information and IP address.
- Plugin file outputs a 404 header and HTML source.
--------
To install:
1) Rename your real /admin/ directory. [Tutorial: http://community.mybb.com/thread-44977.html]
2) Upload the new fake /admin/ directory and the plugin file.
3) Activate the plugin and set email notification preferences.
--------
IMPORTANT: The use of this plugin does not guarantee that your forum will not be hacked. This is only one of many safety measures that can be used to reduce (not eliminate) chances.
--------
Download: http://mods.mybb.com/view/admin-cp-honeypot
(Current Status: Validated & Visible)
Posted on Sun, 15 May 2011 20:16:28 +0000 at http://community.mybb.com/thread-94406.html
The MyBB Admin CP Honeypot is a fake /admin/ directory that looks and acts just like the real thing. The difference? It doesn't actually "work".
Attackers will be faced with an eternal "Wrong username/password" error and will hopefully get discouraged. In addition, the login details that they use in addition to their IP address will be emailed to you, so you can take appropriate action against them.
--------
Admin CP Honeypot Security Features:
- Looks and acts just like the real Admin CP (down to the Source whitespace)
- Mimics the exact file structure of the /admin/ directory, and outputs the same HTML source code.
- Emails the attacker's login information and IP address.
- Plugin file outputs a 404 header and HTML source.
--------
To install:
1) Rename your real /admin/ directory. [Tutorial: http://community.mybb.com/thread-44977.html]
2) Upload the new fake /admin/ directory and the plugin file.
3) Activate the plugin and set email notification preferences.
--------
IMPORTANT: The use of this plugin does not guarantee that your forum will not be hacked. This is only one of many safety measures that can be used to reduce (not eliminate) chances.
--------
Download: http://mods.mybb.com/view/admin-cp-honeypot
(Current Status: Validated & Visible)
Posted on Sun, 15 May 2011 20:16:28 +0000 at http://community.mybb.com/thread-94406.html
