This commit is contained in:
g0tmi1k 2015-12-10 09:14:40 +00:00
parent 425faeee48
commit f50a85ca4b
9 changed files with 20 additions and 21 deletions

View File

@ -60,7 +60,7 @@ class command_busybox(HoneyPotCommand):
log.msg(eventid='KIPP0005', input=line, format='Command found: %(input)s')
self.protocol.call_command(cmdclass, *args)
else:
self.help()
self.help()
else:
self.help()
self.help()
commands['busybox'] = command_busybox

View File

@ -30,19 +30,19 @@ For more information run ethtool -h """)
def do_ethtool_eth0(self):
self.protocol.writeln("""Settings for eth0:
Supported ports: [ TP MII ]
Supported link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Half 1000baseT/Full
Supported link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Half 1000baseT/Full
Supported pause frame use: No
Supports auto-negotiation: Yes
Advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Half 1000baseT/Full
Advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Half 1000baseT/Full
Advertised pause frame use: Symmetric Receive-only
Advertised auto-negotiation: Yes
Link partner advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Link partner advertised link modes: 10baseT/Half 10baseT/Full
100baseT/Half 100baseT/Full
1000baseT/Full
Link partner advertised pause frame use: Symmetric Receive-only
Link partner advertised auto-negotiation: Yes
Speed: 1000Mb/s

View File

@ -1,4 +1,4 @@
# -*- coding: utf-8 -*-
# -*- coding: utf-8 -*-
# Copyright (c) 2014 Peter Reuterås <peter@reuteras.com>
# See the COPYRIGHT file for more information

View File

@ -98,8 +98,8 @@ Sudoers I/O plugin version 1.8.5p2''')
self.protocol.call_command(cmdclass, *args)
self.exit()
else:
self.short_help()
self.short_help()
else:
self.short_help()
self.short_help()
commands['sudo'] = command_sudo

View File

@ -42,7 +42,7 @@ def strpack8(x):
def strunpack8(x):
l = x[0]
return x[1:1+l], x[1+l:]
def msghdr(op, data):
return struct.pack('!iB', 5+len(data), op) + data
def msgpublish(ident, chan, data):

View File

@ -50,7 +50,7 @@ class Output(cowrie.core.output.Output):
self.batch = []
def transmission_error(self, batch):
self.batch.extend(batch)
self.batch.extend(batch)
if len(self.batch) > self.batch_size * 2:
self.batch = self.batch[-self.batch_size:]
@ -72,7 +72,7 @@ class Output(cowrie.core.output.Output):
attempt['user'], attempt['password'])
nonce = base64.b64decode(_nonceb64)
digest = base64.b64encode(hmac.new('{0}{1}'.format(nonce, self.userid),
digest = base64.b64encode(hmac.new('{0}{1}'.format(nonce, self.userid),
base64.b64decode(self.auth_key), hashlib.sha256).digest())
auth_header = 'credentials={0} nonce={1} userid={2}'.format(digest, _nonceb64, self.userid)
headers = {'X-ISC-Authorization': auth_header,

View File

@ -3,7 +3,7 @@
import os
import json
import pyes
import pyes
import cowrie.core.output

View File

@ -1,6 +1,6 @@
#
# Basic Splunk connector.
# Not recommended for production use.
# Basic Splunk connector.
# Not recommended for production use.
# JSON log file is still recommended way to go
#

View File

@ -1,4 +1,3 @@
# How to process Cowrie output with Splunk
Please see: https://github.com/aplura/Tango