* add pip check/pip install to verify recommend config actually works
* add yamllint because too much yaml now
* add FAQ's
This commit is contained in:
Michel Oosterhof
2021-06-09 13:37:10 +08:00
committed by GitHub
parent 90386933e5
commit 2a68eacb69
12 changed files with 101 additions and 46 deletions

View File

@ -15,3 +15,43 @@ time and effort. Cowrie tries to provide most common commands used by attackers
of the honeypot. If you see attackers use a command that you'd like
to see implemented, please let us know, or send a pull request.
How do I add or modify the default user?
****************************************
The default Cowrie users is called `phil` these days. Having the same
user always available is an easy way to identify Cowrie so it's recommend to change
this setup. You can modify it by doing the following::
$ vi honeyfs/etc/passwd
And edit the userid. Then::
$ bin/fsctl share/cowrie/fs.pickle
fs.pickle:/$ mv /home/phil /home/joe
And then restart Cowrie::
$ bin/cowrie restart
How do I add files to the file system?
**************************************
The file system meta data is stored in the pickle file. The file
contents is stored in the `honeyfs` directory. To add a file, the
minimum action is to modify the pickle file. Doing this makes the
file show up in `ls` and other commands. But it won't have any
contents available. To add file contents, you'll need a file to
honeyfs.
First add a file system entry, the `1024` here is the file size. The
`chown` commands only takes numerical uid's, they should match
entries in `honeyfs/etc/passwd`::
$ bin/fsctl share/cowrie/fs.pickle
fs.pickle:/$ touch /home/phil/myfile 1024
fs.pickle:/$ chown 1000:1000 /home/phil/myfile
Then create or copy a file in the `honeyfs`::
$ cp myfile /honeyfs/home/phil