Rooba
/
cowrie
mirror of https://github.com/cowrie/cowrie.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Retrieve client IP address (src_ip) directly in HoneyPotSSHUserAuthServer

This commit is contained in:
HonigBij 2015-03-18 15:44:13 +01:00
parent dc0e183de3
commit 2957d00bd8
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
kippo/core/ssh.py
View File

@ -70,7 +70,8 @@ class HoneyPotSSHUserAuthServer(userauth.SSHUserAuthServer):
transport.DISCONNECT_PROTOCOL_ERROR,
"only one keyboard interactive attempt at a time")
return defer.fail(error.IgnoreAuthentication())
c = auth.PluggableAuthenticationModulesIP(self.user, self._pamConv, self.transport.src_ip)
src_ip=self.transport.getPeer().address.host
c = auth.PluggableAuthenticationModulesIP(self.user, self._pamConv, src_ip)
return self.portal.login(c, None, conchinterfaces.IConchUser)
# As implemented by Kojoney
@ -202,8 +203,6 @@ class HoneyPotTransport(sshserver.KippoSSHServerTransport):
def connectionMade(self):
self.transportId = uuid.uuid4().hex[:8]
self.interactors = []
# store src_ip to use in HoneyPotSSHUserAuthServer
self.src_ip=self.transport.getPeer().host
log.msg( eventid='KIPP0001',
format='New connection: %(src_ip)s:%(src_port)s (%(dst_ip)s:%(dst_port)s) [session: %(sessionno)s]',