Description: In this video I show you how to set up and enable an ssh honeypot on the default port of 22 and move the actual ssh service to a different port. Also we set an IPtables rule to redirect incoming traffic on port 22 to the honeypot which is listening on a port higher than port 1024. This therefore means that we don't have to run the honeypot with root permissions!.
After the honeypot is set up and configured, we install kippo graphs and tie it into the honeypot to analyse the connections and user input who have accessed the honeypot.
Tags:
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.