dionaea icon indicating copy to clipboard operation
dionaea copied to clipboard

MQTT is not publishing any fake message to topics

Open cryptax opened this issue 6 years ago • 3 comments

Hello,

I have installed Dionaea through T-pot. To test it, I have tried to send a MQTT request like mosquitto_sub -t '#' -h SERVERIP -p 1883 or subscribe to topic SYS/#. The honeypot did not answer anything at all :(

Though in the logs, I see my request got to the box:

{"src_ip": "XXXXXXXXX", "dst_port": 1883, "src_port": 49810, "connection": {"protocol": "mqttd", "transport": "tcp", "type": "accept"}, "dst_ip": "YYYYYYYYY", "src_hostname": "", "timestamp": "2019-01-18T10:11:50.045971"}

Why is that? I was expecting to read fake published messages on some topics...

  • Issue Type: probably a bad configuration on my side or bad understanding.
  • Dionaea version: 0.8.0
  • Configuration: default configuration out of T-Pot
  • Environment: Ubuntu 18.04 LTS

cryptax avatar Jan 18 '19 10:01 cryptax

No topics are being published by MQTT, I don't know how to publish them.

image

AizazZaidee avatar Feb 22 '19 14:02 AizazZaidee

dionaea provides only very basic MQTT functionality. But I'm looking forward to implement topic publishing in the next release.

phibos avatar Nov 30 '20 22:11 phibos

Hi, do you know a honeynet that implements advanced MQTT functionality?

ghost avatar May 07 '22 10:05 ghost