Skip to content

SSH Honeypot that gathers creds and attempted commands

License

Notifications You must be signed in to change notification settings

TrueBad0ur/ssh-honeypot

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

32 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

TryHackMe SSH Honeypot

SSH Honeypot that gathers attempted creds, IP addresses and versions. The SSH server will either issue a warning, or drop the attacker into a fake shell.

Loot File Format

The logging now logs to an SQLite database, with schema available in database.sql

Fake Shell

The fake shell will print a bash command not found error for every command entered, except exit. You can enable logging of these commands with the -C flag.

About

SSH Honeypot that gathers creds and attempted commands

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Go 88.4%
  • Dockerfile 9.6%
  • Shell 2.0%