Brothersoft.com Windows | Games | Mobile | Wallpapers

Advertisement

Kippo 0.5

A medium interaction SSH honeypot designed to log brute force attacks.

Advertisement

Last Week downloads: 0
Total downloads: 183
  • Last Updated: Dec 3, 2010
  • License: Freeware Free
  • OS: Windows 7/Unix/Linux
  • Requirements: Python 2.5 or higher
screenshot

User reviews

4 out of 5 based on 1 ratings for Kippo 0.5

For Kippo 0.5Publisher's description

Advertisement

Kippo is a Security software developed by Upi Tamminen. After our trial and test, the software is proved to be official, secure and free. Here is the official description for Kippo:

BS Editor: Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
Features
Some interesting features:
Fake FileSystem with the ability to add/remove files. A full fake filesystem resembling a Debian 5.0 installation is included
Possibility of adding fake file contents so the attacker can 'cat' files such as /etc/passwd. Only minimal file contents are included
Session logs stored in an UML compatible format for easy replay with original timings
Just like Kojoney, Kippo saves files downloaded with wget for later inspection
Trickery; ssh pretends to connect somewhere, exit doesn't really exit, etc .
How to run it?
Edit kippo.cfg to your liking and start the honeypot by running:
./start.sh
start.sh is a simple shell script that runs Kippo in the background using twistd. Detailed startup options can be given by running twistd manually. For example, to run Kippo in foreground:
twistd -y kippo.tac -n
By Default Kippo listens for ssh connections on port 2222. You can change this, but do not change it to 22 as it requires root privileges. Use port forwarding instead. (More info: MakingKippoReachable).
Files of Interest:
dl/ - files downloaded with wget are stored here
log/kippo.log - log/debug output
log/tty/ - session logs
utils/playlog.py - utility to replay session logs
utils/createfs.py - used to create fs.pickle
fs.pickle - fake filesystem
honeyfs/ - file contents for the fake filesystem - feel free to Copy a real system here
you can free download Kippo 0.5 now.

Statement

Please be aware that Brothersoft do not supply any crack, patches, serial numbers or keygen for Kippo,and please consult directly with program authors for any problem with Kippo.