A dockerized honeypot SSH server written in Go to log login attempts. Password authentications always fail so no terminal access is given to the attacker.
go install github.com/fffaraz/fakessh@latest
sudo setcap 'cap_net_bind_service=+ep' ~/go/bin/fakessh
fakessh [optional-log-directory]
OR
docker run -it --rm -p 22:22 fffaraz/fakessh
OR
docker run -d --restart=always -p 22:22 --name fakessh fffaraz/fakessh
docker logs -f fakessh
- jaksi/sshesame - A fake SSH server that lets everyone in and logs their activity.
- shazow/ssh-chat - Custom SSH server written in Go. Instead of a shell, you get a chat prompt.
- gliderlabs/ssh - Easy SSH servers in Golang.
- gliderlabs/sshfront - Programmable SSH frontend.
- desaster/kippo - Kippo - SSH Honeypot.
- micheloosterhof/cowrie - Cowrie SSH/Telnet Honeypot.
- fzerorubigd/go0r - A simple ssh honeypot in golang.
- droberson/ssh-honeypot - Fake sshd that logs ip addresses, usernames, and passwords.
- x0rz/ssh-honeypot - Fake sshd that logs ip addresses, usernames, and passwords.
- tnich/honssh - HonSSH is designed to log all SSH communications between a client and server.
- Learn from your attackers - SSH HoneyPot
- cowrie - Cowrie SSH/Telnet Honeypot.