coreyQAQ的筆記網

首先 在cowrie的目錄底下建一個auto_honey.sh 然後 輸入 bash /home/cowrie/cowrie/bin/cowrie start 之後再 sudo nano /lib/systemd/system/cowrie.service 輸入 [Unit] Description=cowrie Daemon After=syslog.target network.target [Service] Type=simple ExecStart=su cowrie -c "/home/cowrie/auto_honey.sh" [Install] WantedBy=multi-user.target systemctl daemon-reload systemctl start cowrie

grep "succeeded" /home/cowrie/cowrie/var/log/cowrie/*.json.* >temp_json.txt sed -i 's/"/\ /g' temp_json.txt cat temp_json.txt |awk '{print $31}' >atacker_ip.txt cat atacker_ip.txt |sort|uniq -c

首先 apt-get 作者所寫的environment: apt-get install git python-virtualenv libssl-dev libffi-dev build-essential libpython3-dev python3-minimal authbind 有可能會遇到以下錯誤: libssl-dev : Depends: libssl1.1 (= 1.1.1-1ubuntu2) but 1.1.1-1ubuntu2.1 is to be installed E: Unable to correct problems, you have held broken packages. 這時需要 "aptitude" 這工具幫妳進行降版本的動作 apt-get install libssl-dev apt-get install libpython3-dev 記得第一個Accept this solution? [Y/n/q/?]  要選擇n 不然就跟平常apt get 一樣了XDD 之後都選擇y 這工具就會幫你安裝降版本 之後再 apt-get install git python-virtualenv libssl-dev libffi-dev build-essential libpython3-dev python3-minimal authbind 搞定

今天 想要在我的ubuntu裝上cowrie honey pot 遇到了apt源沒有python-virtualenv的情況 原來是我apt源沒有universe 參考了GOOGLE大神後 一句add-apt-repository universe 搞定 參考來源: https://discourse.mailinabox.email/t/package-python-virtualenv-has-no-installation-candidate/2834 https://askubuntu.com/questions/148638/how-do-i-enable-the-universe-repository