{"id":13796106,"url":"https://github.com/cryptix720/hudinx","last_synced_at":"2025-08-31T21:32:15.919Z","repository":{"id":71599770,"uuid":"135628417","full_name":"Cryptix720/HUDINX","owner":"Cryptix720","description":"Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.","archived":false,"fork":false,"pushed_at":"2019-04-30T05:00:46.000Z","size":10867,"stargazers_count":5,"open_issues_count":1,"forks_count":1,"subscribers_count":2,"default_branch":"master","last_synced_at":"2024-11-07T14:12:25.248Z","etag":null,"topics":["attacker","engineering","honeypot","python","website","windows"],"latest_commit_sha":null,"homepage":null,"language":"Tcl","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Cryptix720.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":"audit/README.md","citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS"}},"created_at":"2018-05-31T19:48:13.000Z","updated_at":"2024-10-12T08:39:04.000Z","dependencies_parsed_at":"2023-05-12T10:15:25.625Z","dependency_job_id":null,"html_url":"https://github.com/Cryptix720/HUDINX","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryptix720%2FHUDINX","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryptix720%2FHUDINX/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryptix720%2FHUDINX/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Cryptix720%2FHUDINX/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Cryptix720","download_url":"https://codeload.github.com/Cryptix720/HUDINX/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":231628137,"owners_count":18402726,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["attacker","engineering","honeypot","python","website","windows"],"created_at":"2024-08-03T23:01:06.226Z","updated_at":"2024-12-28T13:19:19.229Z","avatar_url":"https://github.com/Cryptix720.png","language":"Tcl","funding_links":[],"categories":["\u003ca id=\"c8f749888134d57b5fb32382c78ef2d1\"\u003e\u003c/a\u003eSSH\u0026\u0026Telnet"],"sub_categories":[],"readme":"# hudinx\r\n![alt text](https://github.com/Cryptix720/HUDINX/blob/master/honeyX.png)\r\nHudinx is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n## Features\r\n\r\nSome interesting features:\r\n* Fake filesystem with the ability to add/remove files. A full fake filesystem resembling a Debian 5.0 installation is included\r\n* Possibility of adding fake file contents so the attacker can 'cat' files such as /etc/passwd. Only minimal file contents are included\r\n* Session logs stored in an  format for easy replay with original timings\r\n* Just like Hudinx, hudinx saves files downloaded with wget for later inspection\r\n* Trickery; ssh pretends to connect somewhere, exit doesn't really exit, etc\r\n\r\n## Requirements\r\n\r\nSoftware required:\r\n\r\n* Operating systems: (tested on Debian, CentOS, FreeBSD and Windows 7, 8, 10)\r\n* Python 2.7+\r\n* Twisted \r\n* PyCrypto\r\n* StrawberryPerl\r\n* Zope Interface\r\n\r\n\r\nCreate Wiki for some installation instructions!\r\n\r\n## How to install it?\r\n\r\n\r\n`./install.sh`\r\n\r\n\r\n## Configure advanced security with rules ?\r\n\r\n* Configure Windows and Linux security\r\n\r\n\r\n## How to launch \u0026 kill it?\r\n\r\nEdit hudinx.cfg to your liking and start the honeypot by running:\r\n\r\n`./LAUNCH.sh` `./KILL.sh`\r\n\r\nLAUNCH.sh is a simple shell script that runs hudinx in the background using twistd. Detailed startup options can be given by running hudnix manually. For example, to run hudinx in foreground:\r\n\r\n`hudinx -y hudinx.tac -n`\r\n\r\nBy default Hudinx listens for ssh connections on port 3131. You can change this, but do not change it to 22 as it requires root privileges. Use port forwarding instead. (More info: [MakinghudinxReachable](https://github.com/desaster/hudinx/wiki/Making-hudinx-Reachable)).\r\n\r\nFiles of interest:\r\n\r\n* dl/ - files downloaded with wget are stored here\r\n* log/hudinx.log - log/debug output\r\n* log/tty/ - session logs\r\n* log/telnet/ - telnet logs\r\n* utils/playlog.py - utility to replay session logs\r\n* utils/createfs.py - used to create fs.pickle\r\n* fs.pickle - fake filesystem\r\n* honeyfs/ - file contents for the fake filesystem - feel free to copy a real system here\r\n\r\n## Is it secure?\r\n\r\nMaybe. See [FAQ](https://github.com/Cryptix720/hudinx/wiki/FAQ)\r\n\r\n\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcryptix720%2Fhudinx","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcryptix720%2Fhudinx","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcryptix720%2Fhudinx/lists"}