« How to install Thug Python client honeypot

Mining Your Logs - Gaining Insight Through Visualization »

Jan 26 2013

Setup HoneyDrive on VMware (Workstation, ESXi, etc)

UPDATE: While this post and the methods described are still relevant, I have written a new guide here: HoneyDrive 3 VMware guide

Many honeypot enthusiasts who wanted to try out HoneyDrive had difficulties importing the OVA file into VMware software like ESXi, Workstation, etc. I use VirtualBox to develop HoneyDrive and there seems to be an incompatibility between the two virtualization product series. You can always install VirtualBox and easily import HoneyDrive there but I realise this might not be suitable for everyone. So, here are some tips to set up HoneyDrive on VMware (you can try any one of them):

The first one comes from UABgrid Collaboration Environment and you can find it here: https://dev.uabgrid.uab.edu/wiki/VirtualboxToEsxi.

The second comes from commenter “Rob” who utilized VMware’s OVF tool: http://bruteforce.gr/honeydrive-desktop-released.html#comment-779920644 to create multiple live pages like https://comprogear.com/what-level-of-compression-socks-do-i-need/ and https://comprogear.com/best-compression-socks-for-edema/

The third is the failsafe/straightforward one which Richard Bejtlich used to try HoneyDrive 0.2, and commented about it here: http://bruteforce.gr/honeydrive-desktop-released.html#comment-779920647. Basically, OVA is like a compressed tar archive. You can uncompress it using a common utility (e.g. 7zip) and you get HoneyDrive’s virtual disk file in a VMDK format. Then, you can simply manually create a new virtual machine in VMware and attach this file as hard disk. Bear in mind that Ubuntu keeps a record of the MAC addresses for each NIC, and since you create a new VM from scratch I think that the virtual NIC inside HoneyDrive might change its name to eth1 from eth0 (on the contrary, importing the OVA retains the generated MAC). This shouldn’t be a problem (defining a specific interface to use was not required in any of the honeypot software as far as I recall), although it can be fixed very easily by editing udev rules (see: http://www.kkoncepts.net/node/107) for “normalization” reasons.

Last but not least, another guide comes from commenter “Setareh” who wrote about his experience here: http://bruteforce.gr/setup-honeydrive-on-vmware-workstation-esxi-etc.html#comment-979839942. Setareh used the VBoxManage utility to convert between virtual disk formats and successfully imported HoneyDrive into VMWare Workstation 8.

EDIT: user “Hawkie” has commented here to announce the creation of VMWare-converted version of HoneyDrive. You can download it as a torrent from TPB: http://thepiratebay.se/torrent/9402030/Honeydrive_0.2_nectar_edition_vmware_image. Bear in mind that I take no responsibility for the validity or security of this particular project! Use at your own risk.

  • Pingback: HoneyDrive | MixLoL()

  • blurb1980

    Can’t accept license. No text or whatsoever. No install. Pity.

    • Ion

      Hello blurb1980. VMware seems to have issues with OVA files exported from Virtualbox. I suggest you try the last solution, extracting the OVA archive and manually creating a new VM using the HoneyDrive VMDK disk. Regards.

  • Pingback: 蜜罐系统HoneyDrive桌面版V0.2发行 - 雨路博客()

  • jimbob

    Hi, I can confirm that HoneyDrive 0.2 works fine on Citrix XenServer 6.1

    • Ion

      Hello jimbob, thanks for your input. Nice to hear it’s working out of the box 🙂 Regards, Ion.

  • Setareh

    Hi,

    I finaly could run Honeydrive on Vmaware Workstation 8. 🙂

    despite .vmdk extension of HoneyDrive 0.2 Nectar, but it seems to be .vdi disk format. I can add it to a new VM as Disk on vmware but it can’t start due to some hard drive error.

    so I did following steps to convert honeydrive disk to a real .vmdk format(using vboxmanage tool):

    1- change .vmdk extension to .vdi.

    2- under linux, run:

    vboxmanage -clonehd /path_to_disk/HoneyDrive_0.2_Nectar_edition-disk1.vdi /path_to_new_disk/HoneyDrive2.0.vmdk -format VMDK

    after conversion completed, make a new Virtual machine in vmware and set operating system as “other linux 2.6.x kernel” and use existing disk above converted disk.

    this worked for me and I ran HoneyDrive on vmware 8 worksttation successfully.

    • Ion

      Hello Setareh. That is a great guide, thanks a lot for posting! I will update my original post above and include it as well. Let me know how you like HoneyDrive. Best regards, Ion.

  • faredigitale

    I think you are getting simple things diffiicult. I downloaded the ova, update it to the latest package rebooted a couple of times, I removed the guest addictions and switched it off. Then I created a new vmware vm using 6.5/7 (I am owing workstation 9.x), then I was using the original vmdk disk, rebooted again twice and vmware tools. Finally, I shut the vm, exported *.ova and imported on vSphere 5.1. Perfectly Working!

  • Offliner

    hello
    could anyone please show me how to convert vmdk file towork for vmwareworkstion step by step with ovftool

More in Blog News, Honeypots, Virtualization
How to install Thug Python client honeypot
The Kippo Kronicles - Ep1
HoneyDrive review by a honeypot enthusiast
HoneyDrive 0.2 OVA file now available!
SSH honeypot workshop @ BSides London 2013
Close