Ssh Password Capture Using Kippo

Posted By: SecurityTube_Bot
Posted On: Mon 21 Feb 2011
Views: 6141
Share this video:
Share it on Facebook Share it on Twitter Share it on Reddit Share it on Digg Share it on Stumbleupon
Support SecurityTube:


Description:

In this video, John Strand from PaulDotCom demonstrates the dangers of using password authentication in SSH. He used Kippo to demonstrate how passwords can be easily captured for SSH sessions. Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

The key takeaway from this video is to use Public Key based Authentication for SSH in order to thwart SSH password brute-forcing attacks completely.

Tags: basics ,


Comments (2)

nox on Sun 13 Mar 2011

kippo-0.5]$ ./start.sh
Starting kippo in background...Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/twisted/application/app.py", line 626, in run
runApp(config)
File "/usr/lib/python2.7/site-packages/twisted/scripts/twistd.py", line 23, in runApp
_SomeApplicationRunner(config).run()
File "/usr/lib/python2.7/site-packages/twisted/application/app.py", line 374, in run
self.application = self.createOrGetApplication()
File "/usr/lib/python2.7/site-packages/twisted/application/app.py", line 439, in createOrGetApplication
application = getApplication(self.config, passphrase)
--- <exception caught="" here=""> ---
File "/usr/lib/python2.7/site-packages/twisted/application/app.py", line 450, in getApplication
application = service.loadApplication(filename, style, passphrase)
File "/usr/lib/python2.7/site-packages/twisted/application/service.py", line 390, in loadApplication
application = sob.loadValueFromFile(filename, 'application', passphrase)
File "/usr/lib/python2.7/site-packages/twisted/persisted/sob.py", line 210, in loadValueFromFile
exec fileObj in d, d
File "kippo.tac", line 15, in <module>
from twisted.conch.ssh import factory, keys
File "/usr/lib/python2.7/site-packages/twisted/conch/ssh/factory.py", line 21, in <module>
from twisted.conch.ssh import keys
File "/usr/lib/python2.7/site-packages/twisted/conch/ssh/keys.py", line 20, in <module>
from pyasn1.type import univ
exceptions.ImportError: No module named pyasn1.type

Failed to load application: No module named pyasn1.type

m0x on Fri 06 May 2011

meh... i thought he bypassed the certificate error.
Still, nice demonstration.
*thumbs up*

Login to post a comment