Jan 26 2013

Setup HoneyDrive on VMware (Workstation, ESXi, etc)

UPDATE: While this post and the methods described are still relevant, I have written a new guide here: HoneyDrive 3 VMware guide

Many honeypot enthusiasts who wanted to try out HoneyDrive had difficulties importing the OVA file into VMware software like ESXi, Workstation, etc. I use VirtualBox to develop HoneyDrive and there seems to be an incompatibility between the two virtualization product series. You can always install VirtualBox and easily import HoneyDrive there but I realise this might not be suitable for everyone. So, here are some tips to set up HoneyDrive on VMware (you can try any one of them):

The first one comes from UABgrid Collaboration Environment and you can find it here: https://dev.uabgrid.uab.edu/wiki/VirtualboxToEsxi.

The second comes from commenter “Rob” who utilized VMware’s OVF tool: http://bruteforcelab.com/honeydrive-desktop-released.html#comment-779920644

The third is the failsafe/straightforward one which Richard Bejtlich used to try HoneyDrive 0.2, and commented about it here: http://bruteforcelab.com/honeydrive-desktop-released.html#comment-779920647. Basically, OVA is like a compressed tar archive. You can uncompress it using a common utility (e.g. 7zip) and you get HoneyDrive’s virtual disk file in a VMDK format. Then, you can simply manually create a new virtual machine in VMware and attach this file as hard disk. Bear in mind that Ubuntu keeps a record of the MAC addresses for each NIC, and since you create a new VM from scratch I think that the virtual NIC inside HoneyDrive might change its name to eth1 from eth0 (on the contrary, importing the OVA retains the generated MAC). This shouldn’t be a problem (defining a specific interface to use was not required in any of the honeypot software as far as I recall), although it can be fixed very easily by editing udev rules (see: http://www.kkoncepts.net/node/107) for “normalization” reasons.

Last but not least, another guide comes from commenter “Setareh” who wrote about his experience here: http://bruteforcelab.com/setup-honeydrive-on-vmware-workstation-esxi-etc.html#comment-979839942. He used the VBoxManage utility to convert between virtual disk formats and successfully imported HoneyDrive into VMWare Workstation 8.

EDIT: user “Hawkie” has commented here to announce the creation of VMWare-converted version of HoneyDrive. You can download it as a torrent from TPB: http://thepiratebay.se/torrent/9402030/Honeydrive_0.2_nectar_edition_vmware_image. Bear in mind that I take no responsibility for the validity or security of this particular project! Use at your own risk.

8 comments

2 pings

Skip to comment form

    • blurb1980 on April 4, 2013 at 4:33 PM
    • Reply

    Can’t accept license. No text or whatsoever. No install. Pity.

    1. Hello blurb1980. VMware seems to have issues with OVA files exported from Virtualbox. I suggest you try the last solution, extracting the OVA archive and manually creating a new VM using the HoneyDrive VMDK disk. Regards.

    • jimbob on July 15, 2013 at 4:26 PM
    • Reply

    Hi, I can confirm that HoneyDrive 0.2 works fine on Citrix XenServer 6.1

    1. Hello jimbob, thanks for your input. Nice to hear it’s working out of the box 🙂 Regards, Ion.

    • Setareh on July 29, 2013 at 9:44 AM
    • Reply

    Hi,

    I finaly could run Honeydrive on Vmaware Workstation 8. 🙂

    despite .vmdk extension of HoneyDrive 0.2 Nectar, but it seems to be .vdi disk format. I can add it to a new VM as Disk on vmware but it can’t start due to some hard drive error.

    so I did following steps to convert honeydrive disk to a real .vmdk format(using vboxmanage tool):

    1- change .vmdk extension to .vdi.

    2- under linux, run:

    vboxmanage -clonehd /path_to_disk/HoneyDrive_0.2_Nectar_edition-disk1.vdi /path_to_new_disk/HoneyDrive2.0.vmdk –format VMDK

    after conversion completed, make a new Virtual machine in vmware and set operating system as “other linux 2.6.x kernel” and use existing disk above converted disk.

    this worked for me and I ran HoneyDrive on vmware 8 worksttation successfully.

      • Ion on July 30, 2013 at 12:06 PM
      • Reply

      Hello Setareh. That is a great guide, thanks a lot for posting! I will update my original post above and include it as well. Let me know how you like HoneyDrive. Best regards, Ion.

    • faredigitale on October 9, 2013 at 1:39 PM
    • Reply

    I think you are getting simple things diffiicult. I downloaded the ova, update it to the latest package rebooted a couple of times, I removed the guest addictions and switched it off. Then I created a new vmware vm using 6.5/7 (I am owing workstation 9.x), then I was using the original vmdk disk, rebooted again twice and vmware tools. Finally, I shut the vm, exported *.ova and imported on vSphere 5.1. Perfectly Working!

    • Offliner on April 9, 2014 at 1:12 PM
    • Reply

    hello
    could anyone please show me how to convert vmdk file towork for vmwareworkstion step by step with ovftool

  1. […] After downloading the file, you simply have to import the virtual appliance to your virtual machine manager/hypervisor (suggested software: Oracle VM VirtualBox). If you want to use HoneyDrive in VMware products (Workstation, ESXi, etc) please read this: Setup HoneyDrive on VMware […]

  2. […] After downloading the file, you simply have to import the virtual appliance to your virtual machine manager/hypervisor (suggested software: Oracle VM VirtualBox). If you want to use HoneyDrive in VMware products (Workstation, ESXi, etc) please read this: Setup HoneyDrive on VMware […]

Leave a Reply

More in Blog News, Honeypots, Virtualization
How to install Thug Python client honeypot
The Kippo Kronicles – Ep1
HoneyDrive review by a honeypot enthusiast
HoneyDrive 0.2 OVA file now available!
SSH honeypot workshop @ BSides London 2013
Close