add option to disable ssh

This commit is contained in:
Michel Oosterhof
2016-09-23 19:55:34 +00:00
parent 910256686b
commit 12ec797bbb
2 changed files with 43 additions and 20 deletions

View File

@@ -245,6 +245,11 @@ forward_redirect_25 = 127.0.0.1:12525
forward_redirect_587 = 127.0.0.1:12525 forward_redirect_587 = 127.0.0.1:12525
[ssh]
# Enable Telnet support, enabled by default
enabled = true
# ============================================================================ # ============================================================================
# Telnet Specific Options # Telnet Specific Options
# ============================================================================ # ============================================================================

View File

@@ -99,6 +99,26 @@ class CowrieServiceMaker(object):
factory.portal.registerChecker( factory.portal.registerChecker(
core.checkers.HoneypotNoneChecker()) core.checkers.HoneypotNoneChecker())
# ssh is enabled by default
if cfg.has_option('ssh', 'enabled') == False or \
(cfg.has_option('ssh', 'enabled') and \
cfg.getboolean('ssh', 'enabled') == True):
enableSSH = True
else:
enableSSH = False
# telnet is disabled by default
if cfg.has_option('telnet', 'enabled') and \
cfg.getboolean('telnet', 'enabled') == True:
enableTelnet = True
else:
enableTelnet = False
if enableTelnet == False and enableSSH == False:
print('ERROR: You must at least enable SSH or Telnet')
sys.exit(1)
if enableSSH:
if cfg.has_option('ssh', 'listen_addr'): if cfg.has_option('ssh', 'listen_addr'):
listen_ssh_addr = cfg.get('ssh', 'listen_addr') listen_ssh_addr = cfg.get('ssh', 'listen_addr')
elif cfg.has_option('honeypot', 'listen_addr'): elif cfg.has_option('honeypot', 'listen_addr'):
@@ -121,9 +141,7 @@ class CowrieServiceMaker(object):
# FIXME: Use addService on topService ? # FIXME: Use addService on topService ?
svc.setServiceParent(topService) svc.setServiceParent(topService)
if cfg.has_option('telnet', 'enabled') and \ if enableTelnet:
cfg.getboolean('telnet', 'enabled') == True:
if cfg.has_option('telnet', 'listen_addr'): if cfg.has_option('telnet', 'listen_addr'):
listen_telnet_addr = cfg.get('telnet', 'listen_addr') listen_telnet_addr = cfg.get('telnet', 'listen_addr')
else: else: