1
0
mirror of https://github.com/vimagick/dockerfiles.git synced 2024-12-04 10:35:07 +02:00
dockerfiles/cowrie/README.md

50 lines
916 B
Markdown
Raw Normal View History

2015-07-21 18:10:52 +02:00
cowrie
======
2015-11-25 03:42:37 +02:00
![](https://badge.imagelayers.io/vimagick/cowrie:latest.svg)
2015-07-21 18:10:52 +02:00
[`Cowrie`][1] is a medium interaction SSH honeypot designed to log brute force attacks
and, most importantly, the entire shell interaction performed by the attacker.
`Cowrie` is directly based on [`Kippo`][2] by Upi Tamminen (desaster).
## docker-compose.yml
```
cowrie:
image: vimagick/cowrie
ports:
- "2222:2222"
volumes:
2015-11-25 03:42:37 +02:00
- ./dl:/home/cowrie/dl
- ./log:/home/cowrie/log
2015-07-21 18:10:52 +02:00
restart: always
```
## server
```
$ cd ~/fig/cowrie
2015-07-21 19:00:29 +02:00
$ mkdir -p dl log/tty
$ chmod -R 777 dl log
2015-07-21 18:10:52 +02:00
$ tree -F
.
├── docker-compose.yml
2015-07-21 19:00:29 +02:00
├── dl/
2015-07-21 18:10:52 +02:00
└── log/
└── tty/
$ docker-compose up -d
$ tail -f log/cowrie.log
```
## client
```
$ ssh -p 2222 root@server
```
2015-07-21 19:00:29 +02:00
> You can login as `root` with any password except `root` or `123456`.
2015-07-21 18:10:52 +02:00
[1]: https://github.com/micheloosterhof/cowrie
[2]: http://github.com/desaster/kippo/