Kippo
A medium interaction SSH honeypot that logs brute force attacks and attacker shell interactions.
What is Kippo?
Kippo is a medium interaction SSH honeypot that logs brute force attacks and captures the entire shell interaction performed by attackers. It creates a fake filesystem resembling a Debian installation to deceive attackers and study their techniques in a safe environment.
Security researchers, system administrators, and cybersecurity professionals who want to monitor and analyze SSH-based attacks on their networks.
Developers choose Kippo for its realistic deception capabilities, detailed session logging, and ability to capture attacker behavior without risking real systems, making it a valuable tool for threat intelligence.
Overview
Kippo - SSH Honeypot
Use Cases
Best For
- Monitoring SSH brute force attacks on your network
- Capturing and analyzing attacker shell interactions
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
