cowrie ====== ![](https://badge.imagelayers.io/vimagick/cowrie:latest.svg) [`Cowrie`][1] is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. `Cowrie` is directly based on [`Kippo`][2] by Upi Tamminen (desaster). ## docker-compose.yml ``` cowrie: image: vimagick/cowrie ports: - "2222:2222" volumes: - ./dl:/home/cowrie/dl - ./log:/home/cowrie/log restart: always ``` ## server ``` $ cd ~/fig/cowrie $ mkdir -p dl log/tty $ chmod -R 777 dl log $ tree -F . ├── docker-compose.yml ├── dl/ └── log/ └── tty/ $ docker-compose up -d $ tail -f log/cowrie.log ``` ## client ``` $ ssh -p 2222 root@server ``` > You can login as `root` with any password except `root` or `123456`. [1]: https://github.com/micheloosterhof/cowrie [2]: http://github.com/desaster/kippo/