{"id":16804790,"url":"https://github.com/ibug/fakessh","last_synced_at":"2025-03-17T03:31:18.996Z","repository":{"id":215450038,"uuid":"738967866","full_name":"iBug/fakessh","owner":"iBug","description":"A fake SSH tarpit that logs passwords and commands from attackers","archived":false,"fork":false,"pushed_at":"2024-08-06T21:17:11.000Z","size":18,"stargazers_count":34,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-02-27T17:18:01.513Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/iBug.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-01-04T13:18:15.000Z","updated_at":"2025-01-15T18:43:33.000Z","dependencies_parsed_at":"2024-10-27T11:57:31.649Z","dependency_job_id":"a54f7063-9dbc-4a28-8867-8c9e8b3437d2","html_url":"https://github.com/iBug/fakessh","commit_stats":null,"previous_names":["ibug/fakessh"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iBug%2Ffakessh","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iBug%2Ffakessh/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iBug%2Ffakessh/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/iBug%2Ffakessh/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/iBug","download_url":"https://codeload.github.com/iBug/fakessh/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243841203,"owners_count":20356443,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-13T09:46:08.425Z","updated_at":"2025-03-17T03:31:18.338Z","avatar_url":"https://github.com/iBug.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# fakessh\n\nA fake SSH tarpit that logs commands from attackers.\n\n## Building\n\n```shell\nmake\n```\n\nSee `Makefile` for details.\n\n## Running\n\nNo configuration file is required. See `fakessh -h` for available command-line options.\n\n### Running as a systemd service\n\nCopy `etc/fakessh.service` to your `/etc/systemd/system`, then run\n\n```shell\nsystemctl daemon-reload\nsystemctl enable --now fakessh.service\n```\n\nOptionally (but recommended), copy `etc/logrotate.conf` to `/etc/logrotate.d/fakessh` to enable automatic log rotation.\n\n## Example log\n\n```text\n2024/01/02 18:13:35 [conn] ip=157.245.113.75:48220\n2024/01/02 18:13:36 [auth] ip=157.245.113.75:48220 version=\"SSH-2.0-Go\" user=\"lichao\" password=\"123456\"\n2024/01/02 18:13:36 [exec] ip=157.245.113.75:48220 cmd=\"uname -s -v -n -r -m\"\n2024/01/02 18:13:37 [exec] ip=157.245.113.75:48220 cmd=\"uptime -p\"\n2024/01/02 18:13:37 [exec] ip=157.245.113.75:48220 cmd=\"lspci | grep VGA | cut -f5- -d ' '\"\n2024/01/02 18:13:37 [exec] ip=157.245.113.75:48220 cmd=\"lspci | grep VGA -c\"\n2024/01/02 18:13:38 [exec] ip=157.245.113.75:48220 cmd=\"nvidia-smi -q | grep \\\"Product Name\\\" | head -n 1 | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}'\"\n2024/01/02 18:13:38 [exec] ip=157.245.113.75:48220 cmd=\"lspci | grep \\\"3D controller\\\" | cut -f5- -d ' '\"\n2024/01/02 18:13:39 [exec] ip=157.245.113.75:48220 cmd=\"nvidia-smi -q | grep \\\"Product Name\\\" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | grep . -c \"\n2024/01/02 18:13:39 [exec] ip=157.245.113.75:48220 cmd=\"ip r | grep -Eo '[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3}/[0-9]{1,2}' \"\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fibug%2Ffakessh","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fibug%2Ffakessh","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fibug%2Ffakessh/lists"}