This SSH daemon will accept any username/password/key. It only allows 'session' channels (not port forwards or SFTP). It will present a fake shell and record any commands that people attempt to run, along with the date and their IP. It will log all sessions to: /var/log/gohoney/gohoney-yyyymmdd.log Build & Run First download and install Go. On OSX this is as easy as: $ brew install go For other linux/windows/freebsd check http://golang.org Then build it! # Clone this repo $ git clone https://github.com/PaulMaddox/gohoney.git # Fetch all of the Go module dependencies $ cd gohoney $ go get ./... # Build it! $ go build main.go Usage Usage: ./gohoney -b <bind address> -p <port>
Common questions about gohoney including features, pricing, alternatives, and user reviews.
gohoney is SSH Honeypot written in Go that records commands and IP addresses of attempted logins. It is a Security Operations solution designed to help security teams with SSH.
A low-interaction SSH authentication logging honeypot that logs all authentication attempts in JSON format.
A modified version of OpenSSH deamon forwarding commands to Cowrie for logging brute force attacks and shell interactions.