aljaz/cowrie
1
0
Fork 0
mirror of https://github.com/aljazceru/cowrie.git synced 2025-12-17 05:54:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

new option [ssh] forwarding=false this will disable all ssh forwarding

Browse Source
This commit is contained in:
Michel Oosterhof
2017-02-12 18:44:45 +04:00
parent 741710ac68
commit 3e87206fbe
2 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
cowrie.cfg.dist
View File

@@ -238,6 +238,9 @@ forward_redirect_587 = 127.0.0.1:12525
# Enable SSH support, enabled by default # Enable SSH support, enabled by default
enabled = true enabled = true
# Enable SSH direct-tcpip forwarding, enabled by default
forwarding = true
# ============================================================================ # ============================================================================
# Telnet Specific Options # Telnet Specific Options
# ============================================================================ # ============================================================================

13
cowrie/core/avatar.py
View File

@@ -7,7 +7,6 @@ This module contains ...
from zope.interface import implementer from zope.interface import implementer
import twisted
from twisted.conch import avatar from twisted.conch import avatar
from twisted.conch.interfaces import IConchUser, ISession, ISFTPServer from twisted.conch.interfaces import IConchUser, ISession, ISFTPServer
from twisted.conch.ssh import filetransfer as conchfiletransfer from twisted.conch.ssh import filetransfer as conchfiletransfer
@@ -30,9 +29,7 @@ class CowrieUser(avatar.ConchUser):
self.server = server self.server = server
self.cfg = self.server.cfg self.cfg = self.server.cfg
self.channelLookup.update( self.channelLookup['session'] = session.HoneyPotSSHSession
{"session": session.HoneyPotSSHSession,
"direct-tcpip": forwarding.cowrieOpenConnectForwardingClient})
try: try:
pwentry = pwd.Passwd(self.cfg).getpwnam(self.username) pwentry = pwd.Passwd(self.cfg).getpwnam(self.username)
@@ -51,6 +48,14 @@ class CowrieUser(avatar.ConchUser):
except ValueError as e: except ValueError as e:
pass pass
# SSH forwarding disabled only when option is explicitly set
self.channelLookup['direct-tcpip'] = forwarding.cowrieOpenConnectForwardingClient
try:
if self.cfg.getboolean('ssh', 'forwarding') == False:
del self.channelLookup['direct-tcpip']
except:
pass
def logout(self): def logout(self):
""" """