• Parzivus [any]@hexbear.net
    link
    fedilink
    English
    arrow-up
    48
    ·
    11 days ago

    Nepenthes generates random links that always point back to itself—the crawler downloads those new links. Nepenthes happily just returns more and more lists of links pointing back to itself.

    DDOSing yourself to own the bots lol. Kinda joking but I wonder how well this runs once it’s been going for a few days

    • anarchrist@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      37
      ·
      11 days ago

      I bet there’s a sweet spot where you can add a delay to each but the crawler won’t give up. Kind of a reverse slowloris

      • SamotsvetyVIA [any]@hexbear.net
        link
        fedilink
        English
        arrow-up
        7
        ·
        11 days ago

        Kind of a reverse slowloris

        Oh I made that for my server because I noticed so many bots were probing the commonly exposed file directories. It’s nginx and a python server that just opens a connection and slowly sends out json text that looks like it has passwords and secrets until the reverse proxy closes the connection forcefully.

    • Speaker [e/em/eir]@hexbear.net
      link
      fedilink
      English
      arrow-up
      24
      ·
      11 days ago

      I’m almost certain you could get 80% of the functionality of this service in plain NGINX, maybe a tiny sprinkle of Lua for the randomness. Serving “static” content is cheap. Add a little rate limiting and I gotta imagine you could run this on a very shitty board for a long time.