# HosTaGe | Low Interaction Mobile Honeypot

**URL:** <https://onehack.st/t/hostage-low-interaction-mobile-honeypot/177013>\
**Category:** Tools & Scripts\
**Tags:** freebies, android, technology\
**Created:** [March 30, 2021, 7:55am UTC](https://onehack.st/t/hostage-low-interaction-mobile-honeypot/177013 "2021-03-30T07:55:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [March 30, 2021, 7:55am UTC](https://onehack.st/t/hostage-low-interaction-mobile-honeypot/177013/1 "2021-03-30T07:55:45Z")

</div>

[![alt text](https://github.com/aau-network-security/HosTaGe/raw/master/jekyll/ic_launcher.png "Logo Title Text 1")](https://github.com/aau-network-security/HosTaGe/blob/master/jekyll/ic_launcher.png)

# HosTaGe - Honeypot-To-Go

Copyright (C) 2013-2021, Aalborg University (Denmark) and Technische Universität Darmstadt (Germany)

[![HosTaGe Video](https://camo.githubusercontent.com/e2a4d331cd02fc5a9d49934c7b6c287f8889739af2128bb2d178fcdd9968f7e1/687474703a2f2f696d672e796f75747562652e636f6d2f76692f6e5272633254385f6f4b4d2f302e6a7067)](http://www.youtube.com/watch?v=nRrc2T8_oKM)

HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most malware propagate over the network via specific protocols, a low-interaction honeypot located at a mobile device can check wireless networks for actively propagating malware. We envision such honeypots running on all kinds of mobile devices, e.g., smartphones and tablets, to provide a quick assessment on the potential security state of a network.

HosTaGe emulates the following protocols as of the latest version: AMQP, COAP, ECHO, FTP, HTTP, HTTPS, MySQL, MQTT, MODBUS, S7COMM, SNMP, SIP, SMB, SSH, SMTP and TELNET

**Download from Play Store!**

The stable release of HosTaGe can be installed from Google Play Store. [Play Store Link](https://play.google.com/store/apps/details?id=dk.aau.netsec.hostage) or, Scan the QR code below from your Android device.

[![QR](https://github.com/sastry17/HosTaGe-Wiki/raw/master/img/HosTaGe-QR.png)](https://github.com/sastry17/HosTaGe-Wiki/blob/master/img/HosTaGe-QR.png)

**References**

The research behind HosTaGe has been published and presented in a number of scientific and industrial conferences. Below you can find some selected papers:

[1] Emmanouil Vasilomanolakis, Shankar Karuppayah, Mathias Fischer, Mihai Plasoianu, Wulf Pfeiffer, Lars Pandikow, Max Mühlhäuser: This Network is Infected: HosTaGe – a Low-Interaction Honeypot for Mobile Devices. SPSM@CCS 2013:43-48

[2] Emmanouil Vasilomanolakis, Shankar Karuppayah, Mathias Fischer, Max Mühlhäuser: HosTaGe: a Mobile Honeypot for Collaborative Defense. ACM SIN 2014:330-333

[3] Emmanouil Vasilomanolakis, Shreyas Srinivasa, Max Mühlhäuser: Did you really hack a nuclear power plant? An industrial control mobile honeypot. IEEE CNS 2015:729-730

[4] Emmanouil Vasilomanolakis, Shreyas Srinivasa, Carlos Garcia Cordero, Max Mühlhäuser: Multi-stage Attack Detection and Signature Generation with ICS Honeypots. IEEE/IFIP DISSECT@NOMS 2016:1227-1232

**Download APK**

[HosTaGe-v2.2.11.apk](https://github.com/aau-network-security/HosTaGe/releases/download/v2.2.11/HosTaGe-2.2.11.apk) [Release-Notes](https://github.com/aau-network-security/HosTaGe/releases/tag/v2.2.11)(latest)

HosTaGe-v2.1.1.apk [Release-Notes](https://github.com/aau-network-security/HosTaGe/releases/tag/v2.1.1)

HosTaGe-v2.0.0.apk [Release-Notes](https://github.com/aau-network-security/HosTaGe/releases/tag/v2.0.0)

**Wiki**

The Wiki provides information on getting started and using the app. Wiki for HosTaGe can be found here: [Wiki](https://github.com/aau-network-security/HosTaGe/wiki/2.-Getting-Started).

**GUI**

[![homescreen](https://github.com/sastry17/HosTaGe-Wiki/raw/master/gif/alert.gif)](https://github.com/sastry17/HosTaGe-Wiki/raw/master/gif/alert.gif)

**Original Authors**

[Emmanouil Vasilomanolakis](https://mvasiloma.com/) - idea, guidance and suggestions during development

**Contributors**

[Shreyas Srinivasa](https://sastry17.github.io/), lead developer, Aalborg University and Technische Universität Darmstadt (Github - @sastry17)

Eirini Lygerou, GSoC 2020 Developer (Github - @irinil)

Mihai Plasoianu, student developer, Technische Universität Darmstadt

Wulf Pfeiffer, student developer, Technische Universität Darmstadt

Lars Pandikow, student developer, Technische Universität Darmstadt

**Researchers**

[Shankar Karuppayah](https://www.kshankar.com/), mentoring, developer, Technische Universität Darmstadt

[Mathias Fischer](https://www.inf.uni-hamburg.de/inst/ab/snp/team/fischer.html), mentoring, Universität Hamburg

[Max Mühlhäuser](https://www.informatik.tu-darmstadt.de/telekooperation/telecooperation_group/staff_1/staff_1_details_23168.en.jsp), mentoring, Technische Universität Darmstadt

Carlos Garcia Cordero, mentoring, Technische Universität Darmstadt

Features of HoneyRJ were inspiration for this project. [[http://www.cse.wustl.edu/~jain/cse571-09/ftp/honey/manual.html\](http://www.cse.wustl.edu/~jain/cse571-09/ftp/honey/manual.html%5C)]([http://www.cse.wustl.edu/~jain/cse571-09/ftp/honey/manual.html\](http://www.cse.wustl.edu/~jain/cse571-09/ftp/honey/manual.html%5C))

Encryption for the SSH protocol were taken from Ganymed SSH-2 and slightly modified. [http://code.google.com/p/ganymed-ssh-2/](http://code.google.com/p/ganymed-ssh-2/)

**GSoC 2020**

The project was actively developed with participation in Google Summer of Code 2020. More information about GSoC2020 is [here](https://summerofcode.withgoogle.com/projects/#5293206515744768)

**HPFeeds**

To access the hpfeeds from hostage please send an access request to [hostage@es.aau.dk](mailto:hostage@es.aau.dk) with your name and organization. Please note that access to the hpfeeds repository is provided only after an internal review.

## GitHub:

[https://github.com/aau-network-security/HosTaGe](https://github.com/aau-network-security/HosTaGe)

---

<div class="post-metadata">

**Author:** ![MadLion](https://onehack.st/user_avatar/onehack.st/madlion/32/85640_2.png) [@MadLion](https://onehack.st/u/MadLion)\
**Post date:** [March 30, 2021, 2:33pm UTC](https://onehack.st/t/hostage-low-interaction-mobile-honeypot/177013/2 "2021-03-30T14:33:06Z")

</div>

@TheStrength Thank you very much for sharing a valuable app to monitor our phones and tabs, thank you
