From 558bd2a6e00a60786d86f5d2c83c0df5cdb8eca5 Mon Sep 17 00:00:00 2001 From: Michel Oosterhof Date: Sat, 23 Jun 2018 17:06:51 +0000 Subject: [PATCH] document pre-post login banner --- INSTALL.md | 4 ++++ README.md | 2 ++ 2 files changed, 6 insertions(+) diff --git a/INSTALL.md b/INSTALL.md index 3ae77a78..7c7a21d9 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -217,3 +217,7 @@ pip install --upgrade -r requirements.txt bin/cowrie start ``` +# Modifying Cowrie + +The pre-login banner can be set by creating the file `honeyfs/etc/issue.net`. +The post-login banner can be customized by editing `honeyfs/etc/motd`. diff --git a/README.md b/README.md index d46b456d..aa818249 100644 --- a/README.md +++ b/README.md @@ -56,6 +56,8 @@ For Python dependencies, see requirements.txt * `data/userdb.txt` - credentials allowed or disallowed to access the honeypot * `dl/` - files transferred from the attacker to the honeypot are stored here * `honeyfs/` - file contents for the fake filesystem - feel free to copy a real system here or use `bin/fsctl` +* `honeyfs/etc/issue.net` - pre-login banner +* `honeyfs/etc/motd` - post-login banner * `log/cowrie.json` - transaction output in JSON format * `log/cowrie.log` - log/debug output * `log/tty/*.log` - session logs