Tool and Usage
SSHHiPot is a high-interaction SSH honeypot. It captures connections and commands that are to be performed, for the purpose of learning about possible threats.
How it works
By default, the server component listens on port 2222. With port redirection (e.g. via iptables), traffic can be pointed to the software.
As the author also states, running this software as root user is not recommended.
Usage and audience
SSHHiPot is commonly used for learning or threat discovery. Target users for this tool are security professionals and system administrators.
- + The source code of this software is available
Author and Maintainers
SSHHiPot is under development by Stuart McMurray.
Support operating systems
SSHHiPot is known to work on Linux.