What to Do When the Hacker Is Already Inside🎙Darknet Diaries Ep. 42: Mini-Stories Vol. 2
Source: YouTube · Jack Rhysider · published Sep 22, 2022 · 31:08
Jack set up a simple, temporary file-sharing website on a Raspberry Pi as a personal honeypot to observe hacking attempts, but it went completely unnoticed for years 0:01-0:42.
Key Takeaways:
• The site allowed users to easily drag and drop files, which were automatically deleted after a week 0:11-0:17.
• Acknowledging the lack of security, Jack intentionally avoided uploading sensitive information to the server 0:21-0:26.
• To detect potential intruders, he deployed robust monitoring tools, including a firewall, an IDS, and Security Onion for full packet captures 0:32-0:37.
• The experiment yielded zero attacks, primarily because the obscure site had no public visibility 0:37-0:42.
Ultimately, the project demonstrated that without public exposure, even an intentionally vulnerable server remains entirely safe from attackers.
Sources:
- 0:01-0:42 Introduction of the Raspberry Pi file-sharing honeypot project
- 0:11-0:17 Explanation of the drag-and-drop and auto-delete functionality
- 0:21-0:26 Jack's awareness of the site's insecurity and avoidance of sensitive data
- 0:32-0:37 Details of the security monitoring stack (firewall, IDS, Security Onion)
- 0:37-0:42 The lack of hacking attempts due to the site being unknown
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
JACK: Hey, it’s Jack, host of the show. A long
time ago I set up a file-sharing website at home on a Raspberry Pi. I set it up to make it
easy to transfer files between me and anyone I needed to send files to. It was a simple website;
drag and drop the file onto the webpage and boom, it’s hosted on my website for like, a week, and
then it gets deleted. I knew it wasn’t secure so I never posted anything that was sensitive
to it but I also took this opportunity to see if I could detect anyone trying to hack into the
thing. I set up all my best sensors I had at home; a firewall, an intrusion detection system, full
packet captures using Security Onion, I turned on tons of logging and watched but nothing
happened. Nobody knew my site existed to even think about trying to exploit it. Oh,…