Is it possible or has it been done, can a Honeypot be created with bash aliases that would use a very common command someone would run if they were in your system but it aliases to some
Is it possible or has it been done, can a Honeypot be created with bash aliases that would use a very common command someone would run if they were in your system but it aliases to some
Sort of command that would pull a download that is self executed to the host machine?
That's worded a bit fucky, if I need to elaborate, please chime in.
Sounds like you are trying to setup a keylogger of sorts....
Not quite, PC gets hacked, on hacked machine someone does something like cd, but on that PC cd has been set up as an alias for some sort of command that downloads a malicious executable to the hackers machine and executed it.
That executable very well could be a keylogger, but doesn't necessarily have to be. It could be be rm -rf --no-preserve-root / or a reverse shell or whatever really.
I imagine cd would be a terrible choice to alias given how much it's used, but maybe something else more obscure could be used that is frequently used when bots/attackers are rummaging through files for stuff to steal.
I mean, I'm sure it's possible, it's just a matter of how to get the honeypot/script on the system and give the downloaded file executable rights.