Merge pull request #27 from CommunityHoneyNetwork/loggedin_logging

Add logic for loggedin credential capture
CommunityHoneyNetwork · Aug 20, 2019 · 13b37b7 · 13b37b7
2 parents 07c4bcf + 98cf89f
commit 13b37b7
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/hpfeeds-logger/hpfeedslogger/processors.py b/hpfeeds-logger/hpfeedslogger/processors.py
@@ -298,6 +298,15 @@ def kippo_cowrie_sessions(identifier, payload, name, channel):
             msg['ssh_password'] = password
             messages.append(msg)
 
+    if dec.loggedin:
+        username = dec.loggedin[0]
+        password = dec.loggedin[1]
+        msg = dict(base_message)
+        msg['signature'] = 'SSH login successful on {} honeypot'.format(name_lower)
+        msg['ssh_username'] = username
+        msg['ssh_password'] = password
+        messages.append(msg)
+
     if dec.urls:
         for url in dec.urls:
             msg = dict(base_message)