mirror of
https://github.com/telekom-security/tpotce.git
synced 2026-05-29 17:24:15 +00:00
73 lines
1.9 KiB
INI
73 lines
1.9 KiB
INI
[honeypot]
|
|
hostname = srv01
|
|
log_path = log
|
|
logtype = plain
|
|
download_path = dl
|
|
share_path= share/cowrie
|
|
state_path = /tmp/cowrie/data
|
|
etc_path = etc
|
|
contents_path = honeyfs
|
|
txtcmds_path = txtcmds
|
|
ttylog = true
|
|
ttylog_path = log/tty
|
|
interactive_timeout = 180
|
|
authentication_timeout = 120
|
|
backend = shell
|
|
timezone = UTC
|
|
auth_class = AuthRandom
|
|
auth_class_parameters = 2, 5, 10
|
|
data_path = src/cowrie/data
|
|
|
|
[shell]
|
|
filesystem = src/cowrie/data/fs.pickle
|
|
processes = src/cowrie/data/cmdoutput.json
|
|
arch = linux-x64-lsb
|
|
kernel_version = 5.15.0-23-generic-amd64
|
|
kernel_build_string = #25~22.04-Ubuntu SMP
|
|
hardware_platform = x86_64
|
|
operating_system = GNU/Linux
|
|
ssh_version = OpenSSH_8.9p1, OpenSSL 3.0.2 15 Mar 2022
|
|
|
|
[ssh]
|
|
enabled = true
|
|
rsa_public_key = etc/ssh_host_rsa_key.pub
|
|
rsa_private_key = etc/ssh_host_rsa_key
|
|
dsa_public_key = etc/ssh_host_dsa_key.pub
|
|
dsa_private_key = etc/ssh_host_dsa_key
|
|
ecdsa_public_key = etc/ssh_host_ecdsa_key.pub
|
|
ecdsa_private_key = etc/ssh_host_ecdsa_key
|
|
ed25519_public_key = etc/ssh_host_ed25519_key.pub
|
|
ed25519_private_key = etc/ssh_host_ed25519_key
|
|
public_key_auth = ssh-rsa,ssh-dss,ecdsa-sha2-nistp256,ssh-ed25519
|
|
version = SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.10
|
|
ciphers = aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc
|
|
macs = hmac-sha2-512,hmac-sha2-384,hmac-sha2-56,hmac-sha1,hmac-md5
|
|
compression = zlib@openssh.com,zlib,none
|
|
listen_endpoints = tcp:22:interface=0.0.0.0
|
|
sftp_enabled = true
|
|
forwarding = false
|
|
forward_redirect = false
|
|
forward_tunnel = false
|
|
auth_none_enabled = false
|
|
auth_keyboard_interactive_enabled = true
|
|
auth_publickey_allow_any = true
|
|
|
|
[telnet]
|
|
enabled = true
|
|
listen_endpoints = tcp:23:interface=0.0.0.0
|
|
reported_port = 23
|
|
cve_2026_24061_vulnerable = true
|
|
|
|
[output_jsonlog]
|
|
enabled = true
|
|
logfile = log/cowrie.json
|
|
epoch_timestamp = false
|
|
|
|
[output_textlog]
|
|
enabled = false
|
|
logfile = log/cowrie-textlog.log
|
|
format = text
|
|
|
|
[output_crashreporter]
|
|
enabled = false
|
|
debug = false
|