https://github.com/sir-ragna/cobracmdr

SSH low-interaction honeypot written in Go.
https://github.com/sir-ragna/cobracmdr

Last synced: about 2 months ago
JSON representation

SSH low-interaction honeypot written in Go.

• Host: GitHub
• URL: https://github.com/sir-ragna/cobracmdr
• Owner: sir-ragna
• Created: 2019-09-29T10:18:09.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2023-12-09T16:11:05.000Z (about 1 year ago)
• Last Synced: 2023-12-09T23:25:35.134Z (about 1 year ago)
• Language: Go
• Size: 20.5 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: readme.md

Awesome Lists containing this project

README

        

This is a very simple low-interaction ssh honeypot. It allows people to log in 

with any credentials and logs the commands that are attempted.

## Help

    $ ./main --help

    Usage of ./main:

      -a string

            address (default "0.0.0.0")

      -attempts int

            Logging attempts to stop before allowing sign in. (-1 never)

      -console

            Don't log to a file

      -l string

            output file (default "ssh-honeypot.log")

      -p string

            port (default "2222")

## Docker

Building and running with docker.

    docker build -t cobracmdr .

    docker run --rm -it -p 5022:2222 cobracmdr

## Podman

Using podman and buildah is practically the same.

    buildah bud -t cobracmdr .

    podman run --rm -it -p 5022:2222 cobracmdr

When actually running this in production I advise to run detached and 

let the container run detached. Collect the logging with `podman logs`

instead of mounting a log file.

    podman run -d -p 22:2222 cobracmdr

    podman logs  > logs.txt

## Running natively

    go get                  # Install deps

    go build -o main .      # Build

    ./main -p 5022 -console # Run and log to console