Monthly DC801 Presentation Night - Kippo Honey Pots

This friday night we will spend the night talking about Metacortex's favorite type of honey pot. His favorite is of course kippo. Kippo is an SSH honey pot that logs all login and brute force attempts against it. Once an attacker is in it, Kippo will then present them with a sandbox'ed enviroment where it is logging all of the attackers commands. We will walk through setting up Kippo and looking at some of the data it has collected. We will also look at some ways that you can actually detect that you are in a kippo honey pot instead of a real live system.