Docker based high interaction honeypot

vi /etc/ssh/sshd_config

Port 2222

restart sshd

apt-get install xinetd

apt-get install socat

cp scripts/honeypot /usr/bin/honeypot

cp xinetd/honeypot /etc/xinetd.d/honeypot

vi /etc/services

honeypot 22/tcp

restart xinetd

The original honeyterm uses showterm, but I replace it with asciinema, you just need to choose one of them to make.

cd honeyterm_asciinema
make
make build

cd honeyterm
make
make build

$ ssh guest@[IP/Domain Name] default password is "honeypot"

Type some command there, and logout.

You can now use $ sudo docker exec -it {Your_Container} bash to login without commands record

All records are saved in /tmp

If you use honeyterm_asciinema, you can use "getAsciinema.sh" to copy asciinema's json file from all containers.

You can put honeypot.clean to crontab, which can clean container and backup log in /var/log/honeypot