PyCon US is happening May 14th-22nd in Pittsburgh, PA USA.  Learn more

A fake Django admin login screen to notify admins of attempted unauthorized access.

Navigation

Verified details

These details have been verified by PyPI
Maintainers
Avatar for dmpayton from gravatar.com dmpayton

Unverified details

These details have not been verified by PyPI
Project links
Meta
  • License: MIT License (MIT License)
  • Maintainer: Derek Payton
  • Tags django, admin, honeypot, trap
Classifiers

Project description

Travis-CI Coverage Code Climate

django-admin-honeypot is a fake Django admin login screen to log and notify admins of attempted unauthorized access. This app was inspired by discussion in and around Paul McMillan’s security talk at DjangoCon 2011.

Documentation

http://django-admin-honeypot.readthedocs.io

tl;dr

  • Install django-admin-honeypot from PyPI:

    pip install django-admin-honeypot

  • Add admin_honeypot to INSTALLED_APPS

  • Update your urls.py:

    urlpatterns = patterns(''
    ...
    url(r'^admin/', include('admin_honeypot.urls', namespace='admin_honeypot')),
    url(r'^secret/', include(admin.site.urls)),
)

  • Run python manage.py migrate

NOTE: replace secret in the url above with your own secret url prefix

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page