From 41cba0c523406ff133fb63d217ed376ef6951528 Mon Sep 17 00:00:00 2001 From: Michel Oosterhof Date: Mon, 18 Jan 2016 20:00:00 +0000 Subject: [PATCH] store ssh kex cookie. just to check if there's patterns --- cowrie/ssh/transport.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cowrie/ssh/transport.py b/cowrie/ssh/transport.py index 7156029..c7391f8 100644 --- a/cowrie/ssh/transport.py +++ b/cowrie/ssh/transport.py @@ -232,6 +232,8 @@ class HoneyPotTransport(transport.SSHServerTransport, TimeoutMixin): def ssh_KEXINIT(self, packet): """ """ + cookie = packet[:16] + log.msg("ssh KEXINIT cookie %s" % (cookie.encode('hex'),)) k = getNS(packet[16:], 10) strings, rest = k[:-1], k[-1] (kexAlgs, keyAlgs, encCS, encSC, macCS, macSC, compCS, compSC, langCS,