| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | [honeypot] | 
					
						
							|  |  |  | hostname = ubuntu | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | log_path = log | 
					
						
							|  |  |  | download_path = dl | 
					
						
							|  |  |  | share_path= share/cowrie | 
					
						
							|  |  |  | state_path = /tmp/cowrie/data | 
					
						
							|  |  |  | etc_path = etc | 
					
						
							|  |  |  | contents_path = honeyfs | 
					
						
							|  |  |  | txtcmds_path = txtcmds | 
					
						
							|  |  |  | ttylog = true | 
					
						
							|  |  |  | ttylog_path = log/tty | 
					
						
							|  |  |  | interactive_timeout = 180 | 
					
						
							|  |  |  | authentication_timeout = 120 | 
					
						
							|  |  |  | backend = shell | 
					
						
							| 
									
										
										
										
											2019-10-21 20:59:36 +00:00
										 |  |  | timezone = UTC | 
					
						
							|  |  |  | report_public_ip = true | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | auth_class = AuthRandom | 
					
						
							|  |  |  | auth_class_parameters = 2, 5, 10 | 
					
						
							|  |  |  | reported_ssh_port = 22 | 
					
						
							| 
									
										
										
										
											2018-05-04 16:29:55 +00:00
										 |  |  | data_path = /tmp/cowrie/data | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | [shell] | 
					
						
							|  |  |  | filesystem = share/cowrie/fs.pickle  | 
					
						
							|  |  |  | processes = share/cowrie/cmdoutput.json | 
					
						
							| 
									
										
										
										
											2019-10-21 20:59:36 +00:00
										 |  |  | #arch = linux-x64-lsb | 
					
						
							|  |  |  | arch = bsd-aarch64-lsb, bsd-aarch64-msb, bsd-bfin-msb, bsd-mips-lsb, bsd-mips-msb, bsd-mips64-lsb, bsd-mips64-msb, bsd-powepc-msb, bsd-powepc64-lsb, bsd-riscv64-lsb, bsd-sparc-msb, bsd-sparc64-msb, bsd-x32-lsb, bsd-x64-lsb, linux-aarch64-lsb, linux-aarch64-msb, linux-alpha-lsb, linux-am33-lsb, linux-arc-lsb, linux-arc-msb, linux-arm-lsb, linux-arm-msb, linux-avr32-lsb, linux-bfin-lsb, linux-c6x-lsb, linux-c6x-msb, linux-cris-lsb, linux-frv-msb, linux-h8300-msb, linux-hppa-msb, linux-hppa64-msb, linux-ia64-lsb, linux-m32r-msb, linux-m68k-msb, linux-microblaze-msb, linux-mips-lsb, linux-mips-msb, linux-mips64-lsb, linux-mips64-msb, linux-mn10300-lsb, linux-nios-lsb, linux-nios-msb, linux-powerpc-lsb, linux-powerpc-msb, linux-powerpc64-lsb, linux-powerpc64-msb, linux-riscv64-lsb, linux-s390x-msb, linux-sh-lsb, linux-sh-msb, linux-sparc-msb, linux-sparc64-msb, linux-tilegx-lsb, linux-tilegx-msb, linux-tilegx64-lsb, linux-tilegx64-msb, linux-x64-lsb, linux-x86-lsb, linux-xtensa-msb, osx-x32-lsb, osx-x64-lsb | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | kernel_version = 3.2.0-4-amd64 | 
					
						
							|  |  |  | kernel_build_string = #1 SMP Debian 3.2.68-1+deb7u1 | 
					
						
							|  |  |  | hardware_platform = x86_64 | 
					
						
							|  |  |  | operating_system = GNU/Linux | 
					
						
							| 
									
										
										
										
											2019-10-21 20:59:36 +00:00
										 |  |  | ssh_version = OpenSSH_7.9p1, OpenSSL 1.1.1a  20 Nov 2018 | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | [ssh] | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | enabled = true | 
					
						
							|  |  |  | rsa_public_key = etc/ssh_host_rsa_key.pub | 
					
						
							|  |  |  | rsa_private_key = etc/ssh_host_rsa_key | 
					
						
							|  |  |  | dsa_public_key = etc/ssh_host_dsa_key.pub | 
					
						
							|  |  |  | dsa_private_key = etc/ssh_host_dsa_key | 
					
						
							| 
									
										
										
										
											2021-11-05 17:43:47 +00:00
										 |  |  | ecdsa_public_key = etc/ssh_host_ecdsa_key.pub | 
					
						
							|  |  |  | ecdsa_private_key = etc/ssh_host_ecdsa_key | 
					
						
							|  |  |  | ed25519_public_key = etc/ssh_host_ed25519_key.pub | 
					
						
							|  |  |  | ed25519_private_key = etc/ssh_host_ed25519_key | 
					
						
							|  |  |  | public_key_auth = ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519 | 
					
						
							| 
									
										
										
										
											2019-10-21 20:59:36 +00:00
										 |  |  | #version = SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.2 | 
					
						
							|  |  |  | version = SSH-2.0-OpenSSH_7.9p1 | 
					
						
							|  |  |  | ciphers = aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc | 
					
						
							|  |  |  | macs = hmac-sha2-512,hmac-sha2-384,hmac-sha2-56,hmac-sha1,hmac-md5 | 
					
						
							|  |  |  | compression = zlib@openssh.com,zlib,none | 
					
						
							| 
									
										
										
										
											2018-05-04 16:29:55 +00:00
										 |  |  | listen_endpoints = tcp:22:interface=0.0.0.0 | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | sftp_enabled = true | 
					
						
							|  |  |  | forwarding = true | 
					
						
							|  |  |  | forward_redirect = false | 
					
						
							|  |  |  | forward_tunnel = false | 
					
						
							| 
									
										
										
										
											2019-10-21 20:59:36 +00:00
										 |  |  | auth_none_enabled = false | 
					
						
							|  |  |  | auth_keyboard_interactive_enabled = true | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | 
 | 
					
						
							|  |  |  | [telnet] | 
					
						
							|  |  |  | enabled = true | 
					
						
							| 
									
										
										
										
											2018-05-04 16:29:55 +00:00
										 |  |  | listen_endpoints = tcp:23:interface=0.0.0.0 | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | reported_port = 23 | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | [output_jsonlog] | 
					
						
							| 
									
										
										
										
											2018-05-04 16:29:55 +00:00
										 |  |  | enabled = true | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | logfile = log/cowrie.json | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | epoch_timestamp = false | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | 
 | 
					
						
							|  |  |  | [output_textlog] | 
					
						
							| 
									
										
										
										
											2018-05-04 16:29:55 +00:00
										 |  |  | enabled = false | 
					
						
							| 
									
										
										
										
											2017-10-13 18:58:14 +00:00
										 |  |  | logfile = log/cowrie-textlog.log | 
					
						
							|  |  |  | format = text | 
					
						
							| 
									
										
										
										
											2019-02-26 13:07:07 +00:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2019-10-21 20:59:36 +00:00
										 |  |  | [output_crashreporter] | 
					
						
							|  |  |  | enabled = false | 
					
						
							|  |  |  | debug = false |