Gray Hat Hacking, Second Edition, 2nd Edition

Catching Malware: Setting the Trap

In this section, we will set up a safe test environment and go about catching some malware. We will run VMware on our host machine and launch Nepenthes in a virtual Linux machine to catch some malware. To get traffic to our honeypot, we need to open our firewall or in my case, to set the IP of the honeypot as the DMZ host on my firewall.

VMware Host Setup

For this test, we will use VMware on our host and set our trap using this simple configuration:

Caution

There is a small risk in running this setup; we are ...