Skip to content

Latest commit

 

History

History
14 lines (12 loc) · 588 Bytes

README.md

File metadata and controls

14 lines (12 loc) · 588 Bytes

pam_honey.so

pam_honey.so is a PAM module that denies any login attempt and logs the credentials in a text file. It is intended to set up a honeypot.

Setup

  1. Install build dependencies (Debian: gcc make libpam0g-dev, CentOS: gcc make pam-devel)
  2. make
  3. Copy pam_honey.so to the appropriate location (usually /lib/*/security/ or /lib64/security/)
  4. Configure PAM (usually in /etc/pam.d/sshd) to use pam_honey.so: 
    auth       required     pam_honey.so /root/honey.txt
  5. Configure ssh to allow password auth
  6. tail -f /root/honey.txt