SSH蜜罐 Kippo

fmms 13年前發布 | 13K 次閱讀 Python

Kippo是一個中等交互的SSH蜜罐,主要設計用來記錄蠻力破解攻擊。另外,最重要的是Kippo提供了一個可供攻擊者操作的shell。Kippo的靈感來源于Kojoney,但并不基于Kojoney。

安裝Kippo的基本要求:
    * An operating system (tested on Debian, CentOS, FreeBSD and Windows 7)
    * Python 2.5+
    * Twisted 8.0+
    * PyCrypto
    * Zope Interface

特性:

Some interesting features:

  • Fake filesystem with the ability to add/remove files. A full fake filesystem resembling a Debian 5.0 installation is included
  • Possibility of adding fake file contents so the attacker can 'cat' files such as /etc/passwd. Only minimal file contents are included
  • Session logs stored in an UML compatible format for easy replay with original timings
  • Just like Kojoney, Kippo saves files downloaded with wget for later inspection
  • Trickery; ssh pretends to connect somewhere, exit doesn't really exit, etc
項目地址: http://code.google.com/p/kippo/

 本文由用戶 fmms 自行上傳分享,僅供網友學習交流。所有權歸原作者,若您的權利被侵害,請聯系管理員。
 轉載本站原創文章,請注明出處,并保留原始鏈接、圖片水印。
 本站是一個以用戶分享為主的開源技術平臺,歡迎各類分享!