Honeypot 002: admin_phpinfo.php

from flask import Flask, render_template, request, redirect, url_for, Response
import random
import string
import datetime
import os

app = Flask(__name__)

# Configuration - adjust as needed
NUM_USERS = 10
NUM_SETTINGS = 5
LOG_FILE = "honeypot.log"
FAKE_PHPINFO_FILE = "fake_phpinfo.txt"  # File containing fake PHPInfo data
GHOST_MARKDOWN_OUTPUT = "ghost_output.md"

# --- Data Generation Functions ---

def generate_random_string(length=12):
    """Generates a random string of given length."""
    characters = string.ascii_letters + string.digits + string.punctuation
    return ''.join(random.choice(characters) for i in range(length))

def generate_random_email():
    """Generates a random, somewhat plausible email address."""
    domains = ["example.com", "mailinator.com", "tempmail.org", "dodgyhost.net"]
    usernames = ["admin", "user", "info", "support", "webmaster"]
    username = random.choice(usernames) + str(random.randint(1, 999))
    return f"{username}@{random.choice(domains)}"

def generate_random_ip():
    """Generates a random IP address."""
    return ".".join(str(random.randint(0, 255)) for _ in range(4))

def generate_fake_user_data():
    """Generates a list of fake user dictionaries."""
    users = []
    for _ in range(NUM_USERS):
        users.append({
            "username": "user" + str(random.randint(100, 999)),
            "email": generate_random_email(),
            "password": generate_random_string(16),  # Weak password, obviously
            "created_at": datetime.datetime.now() - datetime.timedelta(days=random.randint(1, 365))
        })
    return users

def generate_fake_settings():
    """Generates a list of fake settings dictionaries."""
    settings = []
    for _ in range(NUM_SETTINGS):
        settings.append({
            "setting_name": "setting_" + str(random.randint(1, 10)),
            "setting_value": generate_random_string(20),
            "last_modified": datetime.datetime.now() - datetime.timedelta(days=random.randint(1, 30))
        })
    return settings
def read_fake_phpinfo_data(filepath=FAKE_PHPINFO_FILE):
    """Reads the content of the fake phpinfo file."""
    try:
        with open(filepath, 'r') as f:
            return f.read()
    except FileNotFoundError:
        print(f"Error: File not found: {filepath}")
        return "<!-- Fake PHPInfo Data - Placeholder -->"  # Or raise the exception

# --- Logging Function ---

def log_request(request):
    """Logs the request to a file."""
    timestamp = datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S")
    log_message = f"[{timestamp}] IP: {request.remote_addr}, URL: {request.url}, User-Agent: {request.user_agent.string}\n"
    with open(LOG_FILE, "a") as f:
        f.write(log_message)

# --- Route Definitions ---

@app.route('/admin/phpinfo.php')
def phpinfo():
    """Serves a fake PHPInfo page."""
    log_request(request)
    phpinfo_data = read_fake_phpinfo_data()
    return Response(phpinfo_data, mimetype='text/html')  # Correct MIME type
    #return render_template('phpinfo.html', phpinfo_data=phpinfo_data)  # Using rendered template

@app.route('/admin/')
def admin_panel():
    """Serves a fake admin panel."""
    log_request(request)
    users = generate_fake_user_data()
    settings = generate_fake_settings()
    return render_template('admin_panel.html', users=users, settings=settings)

@app.route('/')
def index():
    """Redirects to /admin/"""
    return redirect(url_for('admin_panel'))

@app.errorhandler(404)
def page_not_found(e):
    log_request(request)
    return render_template('404.html'), 404

# --- Template Rendering and Ghost Output ---

def generate_ghost_markdown(users, settings):
    """Generates Ghost-compatible markdown from the fake data."""
    markdown = "---\n"
    markdown += "title: FakeAdminPanelData\n"
    markdown += f"date: {datetime.datetime.now().isoformat()}\n"
    markdown += "tags: [honeypot, security, fake]\n"  # Important to include relevant tags
    markdown += "---\n\n"

    markdown += "# Fake Admin Panel Data\n\n"
    markdown += "This data is generated by a honeypot to mislead attackers.\n\n"

    markdown += "## Users\n\n"
    markdown += "| Username | Email | Password | Created At |\n"
    markdown += "|---|---|---|---|\n"
    for user in users:
        markdown += f"| {user['username']} | {user['email']} | {user['password']} | {user['created_at']} |\n"

    markdown += "\n## Settings\n\n"
    markdown += "| Setting Name | Value | Last Modified |\n"
    markdown += "|---|---|---|\n"
    for setting in settings:
        markdown += f"| {setting['setting_name']} | {setting['setting_value']} | {setting['last_modified']} |\n"

    return markdown

@app.after_request
def after_request(response):
    """Generates Ghost markdown after a request to /admin/ if no file exists."""
    if request.path == '/admin/' and not os.path.exists(GHOST_MARKDOWN_OUTPUT):
        users = generate_fake_user_data()
        settings = generate_fake_settings()
        markdown = generate_ghost_markdown(users, settings)
        try:
            with open(GHOST_MARKDOWN_OUTPUT, "w") as f:
                f.write(markdown)
            print(f"Ghost markdown saved to {GHOST_MARKDOWN_OUTPUT}")

        except Exception as e:
            print(f"Error writing to Ghost markdown file: {e}")
    return response

# --- Main Block ---

if __name__ == '__main__':
    # Create a default `fake_phpinfo.txt` if it doesn't exist.
    if not os.path.exists(FAKE_PHPINFO_FILE):
        default_phpinfo = """<!DOCTYPE HTML>
<html>
<head>
<title>phpinfo()</title>
<style type="text/css">
body {background-color: #fff; color: #222;}
h1 {font-size: 2em; background-color: #bbb; color: #fff; padding: 0.5em;}
</style>
</head>
<body>
<h1>PHP Version 7.4.2</h1>
<p><b>System</b> Fake OS</p>
<p><b>Build Date</b> Jan 01 2023</p>
<p>...</p></body></html>"""
        with open(FAKE_PHPINFO_FILE, 'w') as f:
            f.write(default_phpinfo)
    app.run(debug=True)  # Remove debug mode in production

<!DOCTYPE html>
<html>
<head>
    <title>Fake Admin Panel</title>
</head>
<body>
    <h1>Fake Admin Panel</h1>

    <h2>Users</h2>
    <table>
        <thead>
            <tr>
                <th>Username</th>
                <th>Email</th>
                <th>Password</th>
                <th>Created At</th>
            </tr>
        </thead>
        <tbody>
            {% for user in users %}
            <tr>
                <td>{{ user.username }}</td>
                <td>{{ user.email }}</td>
                <td>{{ user.password }}</td>
                <td>{{ user.created_at }}</td>
            </tr>
            {% endfor %}
        </tbody>
    </table>

    <h2>Settings</h2>
    <table>
        <thead>
            <tr>
                <th>Setting Name</th>
                <th>Value</th>
                <th>Last Modified</th>
            </tr>
        </thead>
        <tbody>
            {% for setting in settings %}
            <tr>
                <td>{{ setting.setting_name }}</td>
                <td>{{ setting.setting_value }}</td>
                <td>{{ setting.last_modified }}</td>
            </tr>
            {% endfor %}
        </tbody>
    </table>
</body>
</html>

<!DOCTYPE html>
<html>
<head>
    <title>404 Not Found</title>
</head>
<body>
    <h1>404 Not Found</h1>
    <p>The requested URL was not found on this server.</p>
</body>
</html>

<!DOCTYPE html>
<html>
<head>
    <title>phpinfo()</title>
</head>
<body>
    {{ phpinfo_data|safe }}
</body>
</html>