StityExim is a bash script honeypot for CVE-2019-10149 exploit attempts.
The script will set up and configure a Linux server with a vulnerable version of Exim but patch the Exim configuration to be unexploitable. The script will also monitor any IP trying to exploit the server. When an attacking IP is found trying to exploit Exim, an automated email is sent to the abuse email address on file for the IP owner(WhoIs data).
Skills Required
-
Bash Scripting
-
Incident Responce
-
Linux Security
-
Linux Administration