1
0
mirror of https://github.com/vimagick/dockerfiles.git synced 2024-12-04 10:34:49 +02:00
dockerfiles/cowrie
2017-11-05 21:08:34 +08:00
..
arm add cowrie-arm 2017-11-05 21:08:34 +08:00
docker-compose.yml update cowrie 2017-11-05 21:06:52 +08:00
Dockerfile update cowrie 2017-11-05 21:06:52 +08:00
README.md update cowrie 2017-11-05 21:06:52 +08:00

cowrie

Cowrie is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

Cowrie is directly based on Kippo by Upi Tamminen (desaster).

docker-compose.yml

cowrie:
  image: vimagick/cowrie
  ports:
    - "2222:2222"
    - "2223:2223"
  volumes:
    - ./dl:/home/cowrie/dl
    - ./log:/home/cowrie/log
  restart: always

server

$ cd ~/fig/cowrie
$ mkdir -p dl log/tty
$ chmod -R 777 dl log
$ tree -F
.
├── docker-compose.yml
├── dl/
└── log/
    └── tty/
$ docker-compose up -d
$ tail -f log/cowrie.log

client

$ ssh -p 2222 root@server
$ telnet server 2223

You can login as root with any password except root or 123456.