garfieldwtf/cowrie

By garfieldwtf

Updated almost 4 years ago

Multi Arc Cowrie Honeypot - Fork from cowrie/cowrie

Image
Security
2

357

Welcome to the Cowrie Docker GitHub repository

This is the official repository for the Cowrie SSH and Telnet Honeypot Docker effort. It contains Dockerfiles that you can use to build Cowrie Docker images.

Quick Trial

To run Cowrie in Docker locally with creating your own image, run

docker run -p 2222:2222/tcp cowrie/cowrie

Then run an SSH client to port 2222 to test it:

ssh -p 2222 root@localhost

What is Cowrie

Cowrie is a medium interaction SSH and Telnet honeypot designed to log brute force attacks and the shell interaction performed by the attacker.

Building

Note that you will need to install Docker.

Run the following command to build all the images:

$ make all

Configuring Cowrie in Docker

Cowrie in Docker is set up to use an 'etc' volume to store configuration data. Create cowrie.cfg inside the etc volume with the following contents to enable Telnet in your Cowrie Honeypot in Docker

[telnet]
enabled = yes

Docker Pull Command

docker pull garfieldwtf/cowrie