Get full access to Metasploit Penetration Testing Cookbook - Third Edition and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Start your free trial

Shodan Honeyscore Client

Checking whether a server is a honeypot or not is always a good idea. The last thing you want is to waste your time or be blocked because you were trying to attack a honeypot. Using the Shodan Honeyscore Client auxiliary module, you can use Shodan to check whether a server is a honeypot or not. The API returns a score from 0.0 to 1.0, 1.0 being a honeypot:

msf > use auxiliary/gather/shodan_honeyscoremsf auxiliary(shodan_honeyscore) > set SHODAN_APIKEY 1dOobpT0SCLAQsq6yxogEKKh1p6yC2ibSHODAN_APIKEY => 1dOobpT0SCLAQsq6yxogEKKh1p6yC2ibmsf auxiliary(shodan_honeyscore) > set TARGET 83.166.169.248TARGET => 83.166.169.248msf auxiliary(shodan_honeyscore) > run[*] Scanning 83.166.169.248[-] 83.166.169.248 is not a honeypot ...

Get Metasploit Penetration Testing Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now