Commit Graph

2721 Commits

Author SHA1 Message Date
23a570ee5c changelog update 2015-01-21 09:56:51 +00:00
b05ceac704 log full protocol exchange details. to fingerprint clients 2015-01-21 09:53:06 +00:00
4e0c6d9b34 more fixes for correct behavior with non-existent files 2015-01-21 09:08:40 +00:00
5286a8e85b Fix kippo sandbox detecting, taken from
https://code.google.com/p/honssh/source/detail?r=10ffd2ccf076305af2d5eba8a0aa0317b0d9e7ec
thanks to Thomas Nicholson
2015-01-21 08:48:32 +00:00
189a651f07 fix for exception on non-existent directory 2015-01-15 14:10:01 +00:00
e9e09f949e ignore shell commands start with # 2015-01-03 19:19:46 +04:00
63ea54f87a enable JSON logging by default 2014-12-29 11:58:58 +04:00
52fb90df26 treat O_RDWR same as O_WRONLY for open requests 2014-12-18 05:15:42 +00:00
ebdc1e9a96 add lscpu (should be fixed to match something consistent) 2014-12-18 05:08:25 +00:00
9e47327216 indenting && add logging of input for direct-tcpip 2014-12-17 09:54:27 +00:00
0844bc29ed overview of changes from normal Kippo 2014-12-14 13:46:01 +04:00
7124e30a46 reenable password authentication again 2014-12-13 06:45:19 +00:00
8e8882c5c1 redo imports 2014-12-09 13:50:22 +04:00
2e9a3ac1d7 disable password authentication method. This leaves keyboard-interactive available 2014-12-09 13:25:31 +04:00
106af55c98 put sensorname at the top 2014-12-09 13:25:15 +04:00
a3f3866f9e remove unused imports 2014-12-07 17:56:38 +00:00
cb74f2f3ca use short 8 character uuid for log/ttylog 2014-11-28 17:08:23 +00:00
eb558a816e rename 'version' attribute to 'client' 2014-11-28 16:50:08 +00:00
92222f5d41 comment fix 2014-11-28 16:49:52 +00:00
53ba93acd0 add ASN numbers to logstash output 2014-11-18 10:40:29 +00:00
428c27d3c3 add reverse dns lookup 2014-11-17 20:38:23 +00:00
8c4902ebc0 https://raw.githubusercontent.com/ikoniaris/kippo2elasticsearch/master/Kippo2ElasticSearch.json 2014-11-17 20:37:25 +00:00
57fba18bec kibana dashboard (from https://github.com/ikoniaris/kippo2elasticsearch/blob/master/Kippo2ElasticSearch.json) 2014-11-17 20:35:11 +00:00
a7184adae0 logstash config + argument in json log 2014-11-17 19:05:26 +00:00
981e4b1b3c updated changelog/ fix for sftp issue 2014-11-13 07:01:02 +00:00
f0707842d5 add uname -r support 2014-11-12 17:17:49 +00:00
5ed7b390d3 add working sleep command 2014-11-12 16:56:37 +04:00
6b07bb2784 update comments in publickey function 2014-11-12 15:47:41 +04:00
8ad0f84d99 changelog add publickey 2014-11-12 15:05:56 +04:00
5bd541d677 accept and log and fail publickey authentication 2014-11-12 15:04:21 +04:00
b4902823e8 Merge branch 'master' of https://github.com/micheloosterhof/kippo 2014-11-12 13:19:21 +04:00
87243f1eaf Merge pull request #2 from raphaj/master
fix import copy bug
2014-11-12 13:16:29 +04:00
0d2ae7153a fix import copy bug 2014-11-11 22:03:00 +01:00
f480b985d3 cosmetic changes to imports 2014-11-11 21:27:06 +04:00
0fa0825231 rename 'honeypot' parameter to 'protocol', the conch term 2014-11-11 21:21:18 +04:00
79ac8ca29f move hostname setting to avatar. general direction to move settings to avatar 2014-11-11 20:56:52 +04:00
a66f8c92cd Merge branch 'master' of https://github.com/micheloosterhof/kippo 2014-11-09 23:52:35 +04:00
6cf639af74 fix copy imports 2014-11-09 17:19:27 +00:00
9dcb72ff04 Merge branch 'master' of https://github.com/micheloosterhof/kippo 2014-11-09 17:18:05 +00:00
d3bfeca331 fix copy imports 2014-11-09 17:33:29 +04:00
658de4b657 ignore all in log/* not just log/kippo.log* 2014-11-09 17:28:53 +04:00
ad91243658 move fscopy out of sftp/protocol into avatar. rename user to avatar 2014-11-09 17:28:06 +04:00
92013388da add sync command 2014-11-09 16:30:27 +04:00
4cfa58e73d support additional emacs ctrl keys (c-a, c-b, c-f, c-p, c-n, c-e) 2014-11-09 16:26:09 +04:00
3b3f1300b9 add sleep command 2014-11-09 16:05:34 +04:00
b697334549 add chattr 2014-11-08 18:34:24 +00:00
5a6d30215a Remove unused modules from textlog 2014-11-08 18:32:25 +00:00
42fd8a9ee4 Do not reset terminal after user logs out 2014-11-08 18:30:30 +00:00
637e813151 Do not store the same malware several times
this decreases disk space consumption

+ also log sha sum
2014-11-05 18:20:09 +01:00
376015c6b0 catch and log full X11 request and catch agent requests. 2014-11-05 11:34:56 +04:00