search

desaster / kippo

Kippo - SSH Honeypot
1.62k stars 277 forks source link

Issue with passdb.py and pass.db #169

Closed MattBerryWWT closed 9 years ago

MattBerryWWT commented 9 years ago

Ran the passdb.py script to add a password for root (Abc123 in this case). Then restarted kippo and attempted to login. Still get an error in the kippo.log.

See below:

kippo@kali-rasp2:~/kippo$ tail -f log/kippo.log 2014-12-22 01:27:02+0000 [HoneyPotTransport,0,50.194.197.85] incoming: aes128-ctr hmac-md5 none 2014-12-22 01:27:02+0000 [HoneyPotTransport,0,50.194.197.85] NEW KEYS 2014-12-22 01:27:02+0000 [HoneyPotTransport,0,50.194.197.85] starting service ssh-userauth 2014-12-22 01:27:02+0000 [SSHService ssh-userauth on HoneyPotTransport,0,50.194.197.85] root trying auth none 2014-12-22 01:27:02+0000 [SSHService ssh-userauth on HoneyPotTransport,0,50.194.197.85] root trying auth keyboard-interactive 2014-12-22 01:27:05+0000 [SSHService ssh-userauth on HoneyPotTransport,0,50.194.197.85] login attempt [root/Abc123] failed 2014-12-22 01:27:05+0000 [SSHService ssh-userauth on HoneyPotTransport,0,50.194.197.85] root failed auth keyboard-interactive 2014-12-22 01:27:05+0000 [SSHService ssh-userauth on HoneyPotTransport,0,50.194.197.85] unauthorized login: 2014-12-22 01:27:05+0000 [SSHService ssh-userauth on HoneyPotTransport,0,50.194.197.85] root trying auth keyboard-interactive 2014-12-22 01:27:10+0000 [HoneyPotTransport,0,50.194.197.85] connection lost 2014-12-22 01:27:24+0000 [kippo.core.ssh.HoneyPotSSHFactory] New connection: 50.194.197.85:59325 (50.194.197.82:22) [session: 1] 2014-12-22 01:27:24+0000 [HoneyPotTransport,1,50.194.197.85] Remote SSH version: SSH-2.0-OpenSSH_6.2 2014-12-22 01:27:24+0000 [HoneyPotTransport,1,50.194.197.85] kex alg, key alg: diffie-hellman-group1-sha1 ssh-rsa 2014-12-22 01:27:24+0000 [HoneyPotTransport,1,50.194.197.85] outgoing: aes128-ctr hmac-md5 none 2014-12-22 01:27:24+0000 [HoneyPotTransport,1,50.194.197.85] incoming: aes128-ctr hmac-md5 none 2014-12-22 01:27:24+0000 [HoneyPotTransport,1,50.194.197.85] NEW KEYS 2014-12-22 01:27:24+0000 [HoneyPotTransport,1,50.194.197.85] starting service ssh-userauth 2014-12-22 01:27:24+0000 [SSHService ssh-userauth on HoneyPotTransport,1,50.194.197.85] root trying auth none 2014-12-22 01:27:24+0000 [SSHService ssh-userauth on HoneyPotTransport,1,50.194.197.85] root trying auth keyboard-interactive 2014-12-22 01:27:30+0000 [SSHService ssh-userauth on HoneyPotTransport,1,50.194.197.85] login attempt [root/Abc123] failed 2014-12-22 01:27:30+0000 [SSHService ssh-userauth on HoneyPotTransport,1,50.194.197.85] root failed auth keyboard-interactive 2014-12-22 01:27:30+0000 [SSHService ssh-userauth on HoneyPotTransport,1,50.194.197.85] unauthorized login: 2014-12-22 01:27:31+0000 [SSHService ssh-userauth on HoneyPotTransport,1,50.194.197.85] root trying auth keyboard-interactive c^C kippo@kali-rasp2:~/kippo$ utils/passdb.py data/pass.db list Abc123 Password1 p@ssw0rd1 passw0rd 1qaz@wsx PassWord Qwer1234 admin p@ssw0rd

desaster commented 9 years ago

passdb.db is not used in current version of kippo. Edit data/userdb.txt instead.

MattBerryWWT commented 9 years ago

So if I want to have multiple passwords for the "root" account, would I just add separate lines, each with "root" specified as the username?

desaster commented 9 years ago

Yes