This is a non-IMPACT record, meaning that access to the data is not
controlled by IMPACT. For access, see the directions below.
Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.
Disclaimer:
This Resource is offered and provided outside of the IMPACT mediation framework. IMPACT and the IMPACT Coordination Council/Blackfire Technology, Inc. expressly disclaim all conditions, representations and warranties including but not limited to Resource availability, quality, accuracy, non-infringement, and non-interference. All Resource information and access is controlled by entities and under terms that are external to the IMPACT legal framework.
Summary
DS-1357
kippo
External Tool
External Data Source
GitHub
Unknown
Unknown
56 (lowest rank is 56)
Description
Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
Features of Kippo:
-Fake filesystem with the ability to add/remove files. A full fake filesystem resembling a Debian 5.0 installation is included
-Possibility of adding fake file contents so the attacker can 'cat' files such as /etc/passwd. Only minimal file contents are included
-Session logs stored in an UML Compatible format for easy replay with original timings
-Just like Kojoney, Kippo saves files downloaded with wget for later inspection
Trickery; ssh pretends to connect somewhere, exit doesn't really exit, etc
Additional Details
5.0MB
false
Unknown
kippo, 1357, corporation, inferlink, inferlink corporation, external data source, source, external, interaction, attacker, ssh, force, entire, log, shell, honeypot, medium, brute, importantly, attacks, designed, performed, fake, files, file, contents, exit, filesystem, included, connect, possibility, inspection, add, ability, original, logs, passwd, adding, compatible, stored, kojoney, features, trickery, timings, resembling, other, downloaded, easy, replay, wget, format, saves, remove, minimal, doesn, session, uml, debian, installation, cat, pretends