glutton
glutton copied to clipboard
Generic Low Interaction Honeypot
trafficstars
Glutton
Setup go 1.17. Install required system packages:
apt-get install libnetfilter-queue-dev libpcap-dev iptables lsof
Arch:
pacman -S libnetfilter_queue libpcap iptables lsof
To change your SSH server default port (i.e. 5001, see rules.yaml) and restart sshd:
sed -i 's/[# ]*Port .*/Port 5001/g' /etc/ssh/sshd_config
Build glutton:
make build
To run/test glutton:
bin/server
Use as Proxy
Glutton provide SSH and a TCP proxy. SSH proxy works as a MITM between attacker and server to log everything in plain text. TCP proxy does not provide facility for logging yet. Examples can be found here.