How to add uploader?

[Tigzy]

Hello, How can I add some python script to upload payloads to custom location?

[Tigzy]

OK, so I found the submit_http_post, filled the config and created the symlink. However it doesn't get called when I receive binaries (unlike hpfeeds that I filled the same way), is it a bug?

[phibos]

The submit_http_post incident handler does only handle dionaea.download.complete.unique incidents. This means the payload will only be submitted the first time your honeypot sees it.

[DZKeeper]

I am also very interested in this feature. Care to give more details on how to setup this ?

More so, on how to setup this on the dionaea itself and on the receiving server

I have a few dionaea instance, how will dedup happen, any ideas, tips ?

Thanks in advance

[DZKeeper]

@Tigzy : were you able to do this with mrf ?

[Tigzy]

@DZKeeper yes, here: http://www.adlice.com/catch-malware-with-your-own-honeypot-v2/

[Tigzy]

@phibos complete.unique doesn't seem to be called in submit_http_post. probably a bug.

[JBAnderson]

Part 4 of this blog post is probably what you are looking for.