{"id":13464717,"url":"https://github.com/desaster/kippo","last_synced_at":"2025-05-15T17:06:14.648Z","repository":{"id":17456158,"uuid":"20230114","full_name":"desaster/kippo","owner":"desaster","description":"Kippo - SSH Honeypot","archived":false,"fork":false,"pushed_at":"2023-11-19T21:03:37.000Z","size":2709,"stargazers_count":1664,"open_issues_count":83,"forks_count":280,"subscribers_count":85,"default_branch":"master","last_synced_at":"2025-04-07T22:08:54.997Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/desaster.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2014-05-27T18:13:09.000Z","updated_at":"2025-04-07T20:13:40.000Z","dependencies_parsed_at":"2024-01-07T00:09:08.812Z","dependency_job_id":"b834a586-da45-4883-a800-af335591fd2a","html_url":"https://github.com/desaster/kippo","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/desaster%2Fkippo","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/desaster%2Fkippo/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/desaster%2Fkippo/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/desaster%2Fkippo/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/desaster","download_url":"https://codeload.github.com/desaster/kippo/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":254384988,"owners_count":22062422,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-07-31T14:00:49.203Z","updated_at":"2025-05-15T17:06:09.632Z","avatar_url":"https://github.com/desaster.png","language":"Python","readme":"NOTE: For more recent development, check out [Michel Oosterhof's fork](https://github.com/micheloosterhof/cowrie)\n\n# Kippo\n\nKippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.\n\nKippo is inspired, but not based on [Kojoney](http://kojoney.sourceforge.net/).\n\n## Demo\n\nSome interesting logs from a live Kippo installation below (viewable within a web browser with the help of Ajaxterm). Note that some commands may have been improved since these logs were recorded.\n\n  * [2009-11-22](http://kippo.rpg.fi/playlog/?l=20091122-075013-5055.log)\n  * [2009-11-23](http://kippo.rpg.fi/playlog/?l=20091123-003854-3359.log)\n  * [2009-11-23](http://kippo.rpg.fi/playlog/?l=20091123-012814-626.log)\n  * [2010-03-16](http://kippo.rpg.fi/playlog/?l=20100316-233121-1847.log)\n\n## Features\n\nSome interesting features:\n* Fake filesystem with the ability to add/remove files. A full fake filesystem resembling a Debian 5.0 installation is included\n* Possibility of adding fake file contents so the attacker can 'cat' files such as /etc/passwd. Only minimal file contents are included\n* Session logs stored in an [UML Compatible](http://user-mode-linux.sourceforge.net/)  format for easy replay with original timings\n* Just like Kojoney, Kippo saves files downloaded with wget for later inspection\n* Trickery; ssh pretends to connect somewhere, exit doesn't really exit, etc\n\n## Requirements\n\nSoftware required:\n\n* An operating system (tested on Debian, CentOS, FreeBSD and Windows 7)\n* Python 2.5+\n* Twisted 8.0 to 15.1.0\n* PyCrypto\n* Zope Interface\n\nSee Wiki for some installation instructions.\n\n## How to run it?\n\nEdit kippo.cfg to your liking and start the honeypot by running:\n\n`./start.sh`\n\nstart.sh is a simple shell script that runs Kippo in the background using twistd. Detailed startup options can be given by running twistd manually. For example, to run Kippo in foreground:\n\n`twistd -y kippo.tac -n`\n\nBy default Kippo listens for ssh connections on port 2222. You can change this, but do not change it to 22 as it requires root privileges. Use port forwarding instead. (More info: [MakingKippoReachable](https://github.com/desaster/kippo/wiki/Making-Kippo-Reachable)).\n\nFiles of interest:\n\n* dl/ - files downloaded with wget are stored here\n* log/kippo.log - log/debug output\n* log/tty/ - session logs\n* utils/playlog.py - utility to replay session logs\n* utils/createfs.py - used to create fs.pickle\n* fs.pickle - fake filesystem\n* honeyfs/ - file contents for the fake filesystem - feel free to copy a real system here\n\n## Is it secure?\n\nMaybe. See [FAQ](https://github.com/desaster/kippo/wiki/FAQ)\n\n## I have some questions!\n\nI ~~am~~ _might be_ reachable via e-mail: *desaster* at *gmail* dot *com*, or as *desaster* on the *#honeypots* channel in the *freenode* IRC network.\n","funding_links":[],"categories":["Tools","Python","Network","Security","Install from Source","Apps","\u003ca id=\"c8f749888134d57b5fb32382c78ef2d1\"\u003e\u003c/a\u003eSSH\u0026\u0026Telnet","\u003ca name=\"honeypots\"\u003e\u003c/a\u003e Honeypots","Honeypots"],"sub_categories":["Honey","Honey Pot / Honey Net","Security","Testing / Honeypots","Network Security"],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdesaster%2Fkippo","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdesaster%2Fkippo","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdesaster%2Fkippo/lists"}