Kippo - Versionsgeschichte

Thomas: /* Before we begin */

2016-08-27T16:17:14Z

Before we begin

Thomas: /* netstat */

2016-08-27T15:55:14Z

netstat

Thomas: /* start */

2016-08-27T15:52:44Z

start

Thomas: /* At this point we enter the system as ‘kippo’ user and go to the /home directory. */

2016-08-27T15:51:40Z

At this point we enter the system as ‘kippo’ user and go to the /home directory.

Thomas: /* We have to install an older version of Python Twisted */

2016-08-27T15:51:19Z

We have to install an older version of Python Twisted

Thomas: /* Adduser and change visudo that kippo can list users */

2016-08-27T15:50:45Z

Adduser and change visudo that kippo can list users

Thomas: /* start */

2016-08-27T15:46:19Z

start

Thomas: /* Download the latest Kippo version from GitHub */

2016-08-27T15:36:21Z

Download the latest Kippo version from GitHub

Thomas: Die Seite wurde neu angelegt: „=Before we begin= Change standard ssh Port =Install some packets *apt-get install python-dev openssl python-openssl python-pyasn1 python-twisted git authbind…“

2016-08-27T15:21:51Z

Die Seite wurde neu angelegt: „=Before we begin= Change standard ssh Port =Install some packets *apt-get install python-dev openssl python-openssl python-pyasn1 python-twisted git authbind…“

Neue Seite

=Before we begin=
Change standard ssh Port
=Install some packets
*apt-get install python-dev openssl python-openssl python-pyasn1 python-twisted git authbind
=Adduser and change visudo that kippo can list users=
*adduser kippo
*visudo
add
kippo ALL=(ALL:ALL) ALL
under the “root” user.
=create fil and change some rights?
*touch /etc/authbind/byport/22
*chown kippo:kippo /etc/authbind/byport/22
*chmod 777 /etc/authbind/byport/22
=Download the latest Kippo version from GitHub=
git clone https://github.com/desaster/kippo.git
=c

cp kippo.cfg.dist kippo.cfg
nano kippo.cfg

Finally, edit the Kippo start script:

1

nano start.sh

changing the following command from
1

twistd -y kippo.tac -l log/kippo.log --pidfile kippo.pid

to
1

authbind --deep twistd -y kippo.tac -l log/kippo.log --pidfile kippo.pid

so that it uses authbind to “listen” on port 22, and run the honeypot:
1

./start.sh

We check that our port has actually opened and Kippo is “listening”:

1

sudo netstat -antp

where there should be a line like this:
1

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 22627/python

*https://bruteforce.gr/installing-kippo-ssh-honeypot-on-ubuntu.html

@@ Zeile 34: / Zeile 34: @@
 =start=
 *./start.sh
 =netstat=
 *netstat -lntp

@@ Zeile 34: / Zeile 34: @@
 =start=
 *./start.sh
 =Links=
 *https://bruteforce.gr/installing-kippo-ssh-honeypot-on-ubuntu.html
 *https://thelosingedgeblog.wordpress.com/2016/02/15/kippo-kali-pi/

← Nächstältere Version		Version vom 27. August 2016, 15:51 Uhr
Zeile 23:		Zeile 23:

	=At this point we enter the system as ‘kippo’ user and go to the /home directory.=		=At this point we enter the system as ‘kippo’ user and go to the /home directory.=
		+	*sudo - kippo

	=Download the latest Kippo version from GitHub=		=Download the latest Kippo version from GitHub=

@@ Zeile 18: / Zeile 18: @@
 *cd /tmp
 *wget https://github.com/twisted/twisted/archive/twisted-14.0.2.tar.gz
 *tar -zxvf twisted-14.0.2.tar.gz
 *cd twisted-twisted-14.0.2/
 =At this point we enter the system as ‘kippo’ user and go to the /home directory.=

@@ Zeile 2: / Zeile 2: @@
 Change standard ssh Port
 =Install some packets
-*apt-get install python-dev openssl python-openssl python-pyasn1 python-twisted git authbind
+*apt-get install python-dev openssl python-openssl python-pyasn1 git authbind
 =Adduser and change visudo that kippo can list users=
 *adduser kippo

@@ Zeile 13: / Zeile 13: @@
 *chown kippo:kippo /etc/authbind/byport/22
 *chmod 777 /etc/authbind/byport/22
-At this point we enter the system as ‘kippo’ user and go to the /home directory.
+=We have to install an older version of  Python Twisted=
 =Download the latest Kippo version from GitHub=

@@ Zeile 28: / Zeile 28: @@
 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 22627/python
+=Links=
 *https://bruteforce.gr/installing-kippo-ssh-honeypot-on-ubuntu.html

@@ Zeile 13: / Zeile 13: @@
 *chown kippo:kippo /etc/authbind/byport/22
 *chmod 777 /etc/authbind/byport/22
 =Download the latest Kippo version from GitHub=
-git clone https://github.com/desaster/kippo.git
+*git clone https://github.com/desaster/kippo.git
-=c
+=change port=
+*cd kippo
-cp kippo.cfg.dist kippo.cfg
+*sed -e "/ssh_port =/s/2222/22/" kippo.cfg.dist > kippo.cfg
-nano kippo.cfg
+=Finally, change the Kippo start script=
+*sed -i.bak -e "/kippo.tac/s/twistd/authbind --deep &/" start.sh
-    Finally, edit the Kippo start script:
+=start=
+*./start.sh
-where there should be a line like this:
 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 22627/python
 *https://bruteforce.gr/installing-kippo-ssh-honeypot-on-ubuntu.html