This SSH daemon will accept any username/password/key. It only allows 'session' channels (not port forwards or SFTP). It will present a fake shell and record any commands that people attempt to run, along with the date and their IP. It will log all sessions to: /var/log/gohoney/gohoney-yyyymmdd.log Build & Run First download and install Go. On OSX this is as easy as: $ brew install go For other linux/windows/freebsd check http://golang.org Then build it! # Clone this repo $ git clone https://github.com/PaulMaddox/gohoney.git # Fetch all of the Go module dependencies $ cd gohoney $ go get ./... # Build it! $ go build main.go Usage Usage: ./gohoney -b <bind address> -p <port>
Common questions about gohoney including features, pricing, alternatives, and user reviews.
gohoney is SSH Honeypot written in Go that records commands and IP addresses of attempted logins. It is a Security Operations solution designed to help security teams with SSH.
gohoney is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/PaulMaddox/gohoney/ for download and installation instructions.
Popular alternatives to gohoney include:
Compare all gohoney alternatives at https://cybersectools.com/alternatives/gohoney
gohoney is for security teams and organizations that need SSH. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
Head-to-head feature, pricing, and rating breakdowns.
A low-interaction SSH authentication logging honeypot that logs all authentication attempts in JSON format.
A modified version of OpenSSH deamon forwarding commands to Cowrie for logging brute force attacks and shell interactions.