/glutton

Generic Low Interaction Honeypot

Primary LanguageGoMIT LicenseMIT

Glutton

Tests GoDoc

Setup go 1.17. Install required system packages:

apt-get install libnetfilter-queue-dev libpcap-dev iptables lsof

Arch:

pacman -S libnetfilter_queue libpcap iptables lsof

To change your SSH server default port (i.e. 5001, see rules.yaml) and restart sshd:

sed -i 's/[# ]*Port .*/Port 5001/g' /etc/ssh/sshd_config

Build glutton:

make build

To run/test glutton:

bin/server

Use as Proxy

Glutton provide SSH and a TCP proxy. SSH proxy works as a MITM between attacker and server to log everything in plain text. TCP proxy does not provide facility for logging yet. Examples can be found here.