Amun is a so-called low-interaction honeypot, aimed at capturing malware that propagates by exploiting vulnerabilities in remotely accessible services. An example of such a malware is the infamous Conficker or the SQL Slammer worm. In order to catch such malicious software, Amun emulates a large variety of vulnerable services, such as Microsoft SMB. Due to the fact that all services are just emulated, the honeypot itself is never really under the control of the malware, but just pretends to be successfully exploited.
Contents: