Deploying Dionaea on a Raspberry Pi

Deploying Dionaea on a Raspberry Pi using MHN

by nathanmyee

For questions regarding this article, please contact [email protected].

Requirements

• Raspberry Pi (obviously!)
• SD card (4GB or larger)
• HDMI cable
• Monitor with HDMI input
• Ethernet cable
• Router or switch with an Ethernet port
• USB keyboard
• USB mouse (optional)
• Micro USB power adapter (at least 700mA at 5V)

Deployment Steps

Downloading Software

0. Insert the SD card into the card reader.

1. Format the SD card. We recommend using SD Formatter 4.0 which is compatible with a Mac or Windows computer. IMPORTANT: formatting the the SD card will remove all of the files currently on the SD card.

2. Download NOOBS LITE, which will assist with the installation of Raspian. Extract the ZIP file by double-clicking on the ZIP file.

   Alternatively, run the following commands:
   curl -L 'http://downloads.raspberrypi.org/NOOBS_lite_latest' > noobs_pi.zip
unzip noobs_pi.zip

3. Copy the extracted files (approximately 23MB) to the SD card.

4. Safely eject your SD card.

Installing Raspbian

1. Plug the USB keyboard, HDMI monitor, and ethernet cable into the Raspberry Pi. (Note: the USB mouse is optional.)

2. Plug the micro USB cable into the Raspberry Pi to power it on.

3. Upon booting, you will see a list of operating systems. If you're using a mouse, check the box next to Raspbian [RECOMMENDED]. If you're using a keyboard, press the spacebar to select Raspbian [RECOMMENDED]. Click on the Install (i) icon or press the "i" key to install Raspbian.

4. Click "Yes" or press "Enter" to confirm that all of the data will be overwritten on the SD card.

5. Depending on the speed of your Internet connection and SD card, this process can take somewhere between 5 minutes to several hours, days or months.

6. Click "Yes" or press "Enter" to confirm that the OS(es) installed successfully.

7. Press the down arrow key once. 2 Change User Password should be highlighted. Press "Enter". Press "Enter" again to confirm that you will enter a new password.

8. Type in your new password. (Note: even though you won't see anything, your password is still being entered.) Press "Enter" once you're done typing your password.

9. Retype your password. Once you're done, press "Enter."

10. Press "Enter" to confirm that you've successfully changed your password.

11. Press the down arrow key until 8 Advanced Options is highlighted. Press "Enter." Press the down arrow key until A4 SSH is highlighted. Press "Enter."

12. Press "Enter" to enable SSH access. Press "Enter" to confirm that SSH access has been enabled.

13. Press the right arrow key twice. "Finish" should be highlighted. Press "Enter."

Installing Dionaea

1. Run ifconfig and press "Enter." Look at the second line, which should look something like inet addr:192.168.15.150 Bcast: 192.168.15.255 Mask:255.255.255.0. Take note of the IP address after inet addr.

2. We're done with the Raspberry Pi for now. On your host machine with MHN installed, open a new terminal window and run ssh pi@{IP address from step 1}. In my case, I ran ssh [email protected]. You will receive a warning about the authenticity of the host. Type yes and press "Enter". This will only happen once since this is the first time that your host machine has SSH'ed into the Raspberry Pi.

3. Type your password and press "Enter."

4. Go to the MHN web interface. For example, if I followed this guide, I would type in http://10.254.254.100 into my web browser. Click on the "Deploy" tab and select "Raspberry Pi Dionaea" from the drop down menu.

5. Copy the deploy command and run it in your terminal window. Since you're SSH'ed into your Raspberry Pi, you are executing this command on the Raspberry Pi. The script should take approximately 5-10 minutes to run.

6. Once the script is done executing, click on the "Sensors" tab. If you see the Raspberry Pi in the list of sensors, you've successfully deployed your Raspberry Pi as a Dionaea honeypot. Congratulations!

Notes

• The steps for installing Dionaea on the Raspberry Pi can be found on this blog post.
• If you're deploying on an internal network, please follow our guide.