Skip to content

A dockerized fake SSH server honeypot written in Go that logs login attempts.

License

Notifications You must be signed in to change notification settings

fffaraz/fakessh

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

35 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

FakeSSH

A dockerized honeypot SSH server written in Go to log login attempts. Password authentications always fail so no terminal access is given to the attacker.

Quick Start

go install github.com/fffaraz/fakessh@latest
sudo setcap 'cap_net_bind_service=+ep' ~/go/bin/fakessh
fakessh [optional-log-directory]

OR

docker run -it --rm -p 22:22 fffaraz/fakessh

OR

docker run -d --restart=always -p 22:22 --name fakessh fffaraz/fakessh
docker logs -f fakessh

See also