Lukas Rist

Senior Engineering Manager @vivino
I catch hackers in my free time.

[The Honeynet Project @ProjectHoneynet]

THP and @StratosphereIPS are organising this year's @ProjectHoneynet Workshop 2025 in #Prague! Help us spread the word! 🧶

https://t.co/zkkbXtGrnk

#honeynet #cybersecurity #deception #honeypots #infosec #praguetoday #infosec #ThreatIntel #MalwareAnalysis #PragueEvents

[Lukas Rist @glaslos]

@lemire ... with SQL support 😉

[The Honeynet Project @ProjectHoneynet]

The Honeynet Project Workshop 2024 is a month away! We're looking forward to three days of talks and trainings in 🇩🇰 Copenhagen. 😃

Join our T-Pot 101 session, held by the creators of the leading all-in-one honeypot platform. 🎉

https://t.co/DtX7R1JLoe

[The Honeynet Project @ProjectHoneynet]

The Honeynet Project Workshop is approaching fast! Take a look at the updated agenda with the first confirmed talks and trainings https://t.co/0nNXV2fXL9
#honeynet2024 #Copenhagen

[Lukas Rist @glaslos]

@0x4D31 I was flying that evening into ZRH, the sky was on fire!

[Adel Ka @0x4D31]

✨finally carved out time to polish a weekend project! meet Galah 🦜: an llm-powered web honeypot using the @OpenAI api. stay tuned for a blog post diving into the 3 months of data collected from a gcp deployment in early 2023. https://t.co/J2JbUJBZW6 @ProjectHoneynet

[Lukas Rist @glaslos]

@Andrew___Morris Are you doing OS fingerprint spoofing as well?

[antirez @antirez]

My publisher agreed, and now the ePub with the first six chapters of WOHPE is available here: https://t.co/CwzgfQyiJJ

The book so far oddly predicted certain ethical/social issues we are seeing. I hope you'll enjoy it.

[Lukas Rist @glaslos]

Do those RDP scans ever led to anything? Seems to be propagating as they originate from random IP ranges (tendency for Asia). My #honeypot gets stuck after the first response: https://t.co/lArdrGVQR4

[Lukas Rist @glaslos]

We release 1.0 of our low interaction, server-side #honeypot Glutton. Detailed blog post @ProjectHoneynet : https://t.co/REfWS82g6G

[Lukas Rist @glaslos]

@majek04 Awesome, this worked! Added '-m state ! --state ESTABLISHED,RELATED' and I get incoming connections into the TPROXY and outgoing go straight through. Thanks for the help! Now I'm nervous about UDP...

[Lukas Rist @glaslos]

@majek04 I'm trying to replicate your AnyCast/TPROXY setup but it feels like there is something missing in the blog post 🤔https://t.co/opfeU0OxhR

[Lukas Rist @glaslos]

@majek04 Awesome, thanks for the quick feedback, I'll give that a try. I assume this wasn't a use case for you as you would always proxy all traffic?

[Lukas Rist @glaslos]

@halvarflake I lost passion because of most security marketing boiling down to crude fear mongering

[Lukas Rist @glaslos]

@silascutler Run https://t.co/vXGrCQY7ks and double the entertainment

[Lukas Rist @glaslos]

@TheReibel Seems like there is a wave of calls in Chinese these days?

[Lukas Rist @glaslos]

@Andrew___Morris @GreyNoiseIO @Horizon3Attack Are you using some kind of attack surface / bait to attract web attacks via dorks or is this random IP space attacks?

[Justin Tunney @jartine]

I just got Blink performing twice as fast as Qemu, while reducing Blink's size to 157kb. What makes Blink so tiny and fast is it uses a printf-style DSL for x86/aarch64 JIT code generation. Beta testers wanted.
https://t.co/ram0UF24CH

[Enable Security @enablesecurity]

We put out an article on How to do your own DDoS simulation exercises: https://t.co/CTXa1Ibfa6 #DDoS #Pentesting

[Ukraine Solidarity Project @SolidarityUKR]

We just helped @RedBull launch their new global marketing campaign. It's surprisingly honest.