Skip to content

sjbell/basic_ssh_honeypot_with_downloader

Repository files navigation

Basic SSH Honeypot - with Downloader

Following on from Part 1, this repo extends the basic SSH honeypot with a downloaderer -- for getting malware samples. Part of my blog post: How to build an SSH honeypot in Python and Docker - Part 2. Made with Python, containserised in Docker, managed with Docker Compose.

Uses the Paramiko Python SSH protocol library.

Installation

Port forwarding

Setup port forwarding (e.g. from 22 to 2222)

iptables -A PREROUTING -t nat -p tcp --dport 22 -j REDIRECT --to-port 2222

Generate server key

ssh-keygen -t rsa -f server.key

Build

docker-compose build

Run

docker-compose up

Logs are recorded in the auto-generated ssh_honeypot.log and ssh_honeypot_downloader.log files

About

A basic SSH honeypot with downloader (to collect malware samples). Made with Python, containerised in Docker, managed with Docker Compose.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published