Commit Graph

2183 Commits

Author SHA1 Message Date
c58056b01a Refuse to enable SGA and LINEMODE during authentication (#415)
Some telnet clients attempt to initiate negotiation about SGA and LINEMODE themselves, but only when a port isn't specified on the command line. If we allow them to enable SGA or LINEMODE, they change from sending a newline character when enter is pressed to sending a carriage return.  Cowrie can't handle this properly at the login prompt, which prevents the client from being able to login.

I left the old code commented out so it is easier re-enable once Cowrie/Twisted support the Telnet protocol better.

Fixes #414
2017-01-21 14:30:31 +08:00
2152a73cc6 Ignore parentheses in command. Fixed issue #361 (#416) 2017-01-21 14:28:50 +08:00
8c3286276a Move mongodb.py file to correct location. (#410) 2017-01-15 00:44:48 +04:00
eb638750a1 Added MongoDB output support (#407) 2017-01-13 17:57:19 +04:00
cf16ff398e Elk doc update (#408)
* Update logstash's configuration to reflect changes in maxmind's geoip databases

* Update documentation on "ELK Stack"

* Add sample of filebeat configuration

* Update documentation for "ELK Stack" with FileBeat option

* Add some tips on configuration of kibana

* Remove outdated kibana-cowrie.conf

* Add link to XPack
2017-01-13 17:56:35 +04:00
df735dd286 Update dshield.py (#404) 2017-01-11 21:53:31 +04:00
6380825960 Update dshield.py (#401)
fix for dshield.py
2017-01-10 21:43:06 +04:00
37f178a915 Fixed issue #398 (#399) 2017-01-08 21:29:20 +04:00
6e36f98863 Merge branch 'master' of https://github.com/micheloosterhof/cowrie 2017-01-06 00:44:12 +04:00
ed3ac80fa3 Fix #385 by implementing telnet_Command (#392) 2017-01-05 17:48:59 +04:00
cbb02c7f04 Fixes #396 (#397) 2017-01-05 10:33:23 +04:00
0254a78d53 Updated to correct PIDFile path for cowrie.service (#395)
* Updated service template to use the virtual-env and proper PID file location

* Fixed PIDFile path in cowrie.service template

* Revert "Fixed PIDFile path in cowrie.service template"

This reverts commit 022afb7134.

* Revert "Revert "Fixed PIDFile path in cowrie.service template""

This reverts commit 5b01372176.

Revert changes

* Fixed PIDFile path in cowrie.service template

* Updated to correct PIDFile path for cowrie.service
2017-01-04 23:26:53 +04:00
439ef8499f Fixed PIDFile path in cowrie.service template (#394)
* Updated service template to use the virtual-env and proper PID file location

* Fixed PIDFile path in cowrie.service template

* Revert "Fixed PIDFile path in cowrie.service template"

This reverts commit 022afb7134.

* Revert "Revert "Fixed PIDFile path in cowrie.service template""

This reverts commit 5b01372176.

Revert changes

* Fixed PIDFile path in cowrie.service template
2017-01-04 22:19:25 +04:00
1685f3af79 ignore trial dirs 2017-01-02 14:54:59 +04:00
24c251b405 Improve handling of ImportErrors to notify users that they need to install new dependencies (#389)
* Improve handling of ImportErrors to notify users that they need to install new dependencies

Also added missing dependency to requirements.txt

* Mention installing dependencies in virtualenv if used

* Move requirements used only by output modules to a separate file

* Using a virtualenv is now the only officially supported method

* Handle ImportErrors when loading output plugins so different install instructions can be given

* Cleanup requirements-output.txt
2017-01-01 21:18:59 +04:00
ccbd05746e Updated service template to use the virtual-env and proper PID file location (#387) 2017-01-01 21:17:28 +04:00
a1675e3cea remove interact feature 2016-12-20 11:40:26 +00:00
20e6984793 fix telnet memory leak? 2016-12-20 08:02:08 +00:00
a320ae5145 debug code removed 2016-12-20 07:40:45 +00:00
345e36fab1 remove old dblog plugins 2016-12-20 07:19:50 +00:00
0ad2e65ef7 Merge branch 'master' of https://github.com/micheloosterhof/cowrie
Conflicts:
	start.sh
2016-12-20 07:18:24 +00:00
1a462eafe6 Documentation and start script changes to assist with supervisord usage (#346)
* * Updating start script to run in the foreground when using supervisord.
* Update install documentation to reference use of supervisord and install on OSX

* Updating index of INSTALL.md to with reference to supervisord

* Adding slack output and db

* Restoring start.sh back to default of AUTHBIND_ENABLED=no and DAEMONIZE=no

* Updating with pretty formatting of json dump
2016-12-20 11:15:28 +04:00
83065bcaeb use $PIDFILE instead of fixedname 2016-12-19 06:49:04 +00:00
1a0ed7baa6 Fix exception in connectionLost due to not passing self (#382) 2016-12-19 10:47:34 +04:00
cde3f71d4b fix call 2016-12-18 15:42:10 +00:00
b64d0d3802 set interactive timeout to 3min 2016-12-18 15:10:29 +04:00
95ce0f0fec unset session 2016-12-18 15:07:29 +04:00
ee177d5482 remove circular references 2016-12-18 15:01:38 +04:00
393d770713 remove drive 2016-12-18 14:32:24 +04:00
b134f9d791 clear references on connectionLost 2016-12-18 14:29:11 +04:00
8dc54822cf Added ftpget command. (#379) 2016-12-17 22:43:33 +04:00
115ccd6886 Telnet negotiation errors (#380)
* Telnet option negotiation now chained and handled better to prevent logging expected errors

Also added support for parsing NAWS negotiation and setting windowSize accordingly
This still needs more work to realistically behave like other Telnet servers, but it is limited significantly by Twisted's limited option support and Telnet clients' inconsistent behavior

* While not standard, negotiating these options here does result in better client behavior

* Cleanup old comments and unused code
2016-12-16 11:56:17 +04:00
30d08f6347 Fix Setup Virtual Environment anchor in install doc (#377) 2016-12-15 12:05:29 +04:00
82e3b1fccd remove non-virtual environment from install doc 2016-12-11 15:40:00 +04:00
f785711a1f logDispatch not required here 2016-12-11 15:27:26 +04:00
1c527a5910 style changes tftp 2016-12-11 15:15:24 +04:00
d6b9115ba7 cowrie script needs to be bash 2016-12-11 15:05:00 +04:00
0fda46b933 Remove redundant space, handle double slashes in escape string (#340) 2016-12-11 14:53:44 +04:00
Wes
c0aecda450 re-factored a bit, added telnet support (#375) 2016-12-11 14:52:21 +04:00
2102b1b9e1 Hash files downloaded via tftp (#363) 2016-12-11 02:15:50 +04:00
98b907b26d Merge branch 'master' of https://github.com/micheloosterhof/cowrie
Conflicts:
	cowrie/output/csirtg.py
2016-12-06 17:46:06 +00:00
f4e65f570f remove dblog/texlog. 2016-12-06 17:45:25 +00:00
Wes
b609949e6d problem: csirtg.io plugin outputs too much debug information (#374)
* fixing debugging output for csirtg.io plugin

* fixing default description
2016-12-06 21:44:25 +04:00
Wes
0bd9777f59 adding csirtg.io sdk support (#357) 2016-12-05 14:46:49 +04:00
Wes
98a31b5e76 cef fixes (#360) 2016-12-05 14:42:48 +04:00
376eb846a0 Log tftp download only if it's successful (#362) 2016-12-05 14:40:41 +04:00
b127dc4f7f Fix #369 2016-12-05 14:37:44 +04:00
c007175046 Fix #359 2016-11-21 15:40:16 +04:00
453f508c2c Fix #355 2016-11-20 15:07:05 +04:00
17d7ef138f also add trapsig 2016-11-16 15:45:31 +04:00