Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am working on Web application honeypot. It collects PHP files it receives (as part of an RFI attack) and runs them in order to return the result back to the attacker. The aim is to coax the bad guy into going further into his attack. Based on the answers to my SO question, I am looking at using VMs for running the PHP Sandbox.

The honeypot itself consists of Python code and will be running in a Linux environment (preferably Ubuntu-like). These are some of the requirements:

  1. The VM should be a light weight as possible. We are going to distribute the code around and many people are going to use the VM along with the Python based honeypot. So, the installation and configuration should not be too difficult.

  2. The guest system would also be Linux as we are going to distribute the VM image around.

  3. It should be possible for the Python code outside to talk to the guest system. It would be passing on the PHP file to the guest system and will get the output result from it.

  4. It should be possible to automate the initial configuration of the VM (such as allocation of RAM etc.) I would like to randomize these settings in order to make the sandbox less 'fingerprintable'

I have looked at OpenVZ and KVM so far. Are there any other VMs that I might look at? What do you recommend?

share|improve this question

closed as off topic by symcbean, Bart De Vos, Ward, rnxrx, Scott Pack Aug 27 '12 at 17:02

Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Since this is predicated on the answers to the copy of your original question posted at security.stackexchange.com/questions/13052/…, maybe you should continue the dicussion there? –  symcbean Mar 29 '12 at 11:21
    
@symcbean Since this was on VMs, I thought it might be apt to ask it here. But please give me your suggestions anywhere you like. –  Phani Mar 29 '12 at 18:35

1 Answer 1

Virtualbox and vmplayer will do also. Xen is another. For guest os you might want to start either with jeos or one of the minimal ubuntu isos. You can easily find all these.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.