HosTaGe is a lightweight mobile honeypot aimed at detecting malicious, wireless networks.
As most malware spreads over the network and through specific protocols, a honeypot can control wireless networks for active malware.
The company, as it says, envisions such honeypots working on all kinds of mobile devices, e.g. smartphones and tablets, to provide a quick security assessment of a network.
HosTaGe imitates the following protocols in its latest version: AMQP, COAP, ECHO, FTP, HTTP, HTTPS, MySQL, MQTT, MODBUS, S7COMM, SNMP, SIP, SMB, SSH, SMTP and TELNET
To start the honeypot service, the device must be connected to WiFi or to network LTE/4G. The honeypot service can be started from the home screen using the switch. By default, it starts the “Paranoid” profile which emulates all protocols in HosTaGe.
Specifications
The bot has three states:
- Safe (Cheerful Dancing)
- Under Attack! (Jumping in red with a bee)
- Infected Network (A vigil bot)
By default when the honeypot service starts on a new network, the android bot starts with a happy motion indicating that the network is safe. The current network status can also be checked by double-clicking the bot.
When it detects an attack, the android bot starts jumping in panic with a bee around it. This is done to notify the user that an attack has been detected.
The bot displays the panic function for a detected attack for a period of 15 minutes. After this period, the bot displays a warning gesture notifying the user that the network is infected.
HosTaGe also stores the infected networks in the base data so that the user is notified whenever the application is connected to an infected network.
Application snapshots
You can download the application from here. It is no longer available from the Play Store.