Anatomy of a Real Linux Intrusion Part I: Running a MiTM SSH honeypot
by Angel Anonso
September 15, 2016
https://blog.angelalonso.es/2016/09/anatomy-of-real-linux-intrusion-part-i.html
Notes |
---|
Linux malware |
Linux |
MiTM |
honeypot |
SSH |
trojan |
rootkit |
Sebek |
hooking |
system call |
Dublin City University |
Kippo |
Raspberry Pi |
ISP |
WiFi |
Raspberry Pi 3 model B |
honssh - Kippo fork |
Raspbian |
router |
Raspberry Pi 2 |
firewall |
NAT |
port 22 |
Debian |
iptables |
HTTP, NTP, DNS |
sshd key |
openssh-server |
cron |