Kippo

Madiha Azeem

Updated on:

Kippo is a medium interaction SSH honeypot that can simulate a vulnerable SSH server to attract and record attacks from remote attackers. Kippo is designed to mimic a real SSH server, so attackers believe they are attacking an entire system and exposing their techniques and tools. Its logs all the attacker’s activities, including the commands they run, files they upload/download, and their IP addresses.

It can be extended with Python scripts to implement custom behavior or analyze captured data. Kippo supports fake username/password combinations and can be configured to accept any credentials to attract attackers. It can be configured to give attackers a limited interactive shell.

Features

  • Realistic filesystem
  • logging and monitoring
  • Extensibility
  • Web interface

Kippo Alternatives

License Model

Paid

Available On

Social Links

Kippo Information

10 Alternatives Listed
Likes: 0
Comments: 0
Updated on: March 9, 2023
Photo of author
Author

Leave a Comment