search

cernec1999 / ssh-honeypot

5 stars 1 forks source link

Dashboard to view active attacker connections #13

Open cernec1999 opened 4 years ago

cernec1999 commented 4 years ago

Issue Summary

A nice-to-have feature is a dashboard where administrators can see the current active SSH connections in real-time. We can use xtermjs for this. More exciting than watching sports!

Ideally, we'd create a web-server in Golang to serve the active connections. But because we have the SQL database, realistically, we can use any backend web framework that can interface with SQL. We just need to have some sort of event handling system in this case. I vote stick with Golang for now, and we should be able to query the active connections.

cernec1999 commented 3 years ago

Is this even worth it? I've found that most bots use the exec channel, and don't even request a TTY.