Code Monkey home page Code Monkey logo

cowrie's Introduction

cowrie's People

Contributors

amerck avatar breakfastdub avatar chodonne avatar clcollins avatar drewstinnett avatar jessebowling avatar robinlennox avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

cowrie's Issues

DOCKER=yes does not stop log file creation

the executable /opt/cowrie/bin/cowrie requires the env var DOCKER=yes in order to not generate /opt/cowrie/var/log/cowrie/cowrie.log* files.

In the file cowrie.run.j2

exec su - cowrie -c "/opt/cowrie/bin/cowrie start"

when su uses "-" it starts a new shell and does not pass the DOCKER env var to the session. Without this var set, the twisted command sets logging options.

A quick fix is to change the line like so:

exec su - cowrie -c "DOCKER=${DOCKER} /opt/cowrie/bin/cowrie start"

setting TAGS environment variable does not add the tags to the hpfeed outpu

Previously, setting TAGS (in the configuration file, now as an environment variable) resulted in the tags getting added to each log sent to the CHN hpfeed server. Now setting TAGS does not result in the tags getting added to the logs.

This seems related to moving from the custom hpfeeds.py output that included tags support to cowrie's official hpfeed3.py output that doesn't not support tags.

hpfeeds output plugin

Hi! I see you made extensions to the hpfeeds output plugin.
If you want, you can send a PR and I can merge them in the main cowrie project.
I won't copy it myself because your plugin is LGPL and doesn't match Cowrie's license.
But if you are willing to change that, I'm happy to take any updates,

Allow for custom etc/userdb.txt files

Two items:

  • Generate a userdb.txt to use in default cases that differs from upstream cowrie defaults
  • allow users to provide and map in a custom userdb.txt file

Automate random identity on startup

With default cowrie settings, this is currently an issue: cowrie/cowrie#1102

In that thread, they mention this cool project which is a good starting place to customize cowrie identity: https://github.com/411Hall/obscurer

Some of that can be mapped into the PERSONALITY property in the sysconfig file. However, I think it would be useful to add the functions from that obscurer.py to run at cowrie container startup to automatically change things up to reduce fingerprinting.

Could try to make certain things user-customizable in the sysconfig file such as user list, etc. If not specified, it would go with a default list.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.