Show HN: SFTPGo 0.9.6

Re:Show HN: SFTPGo 0.9.6 by dillonmckay on Sunday March 08, 2020 @10:51AM (#22518286)

So, at my work, we host both SFTP and FTP to receive data feeds.

Has anyone seen an FTP honeypot that would serve zip bombs to malicious users and allow legit users proper access?

[ Parent | on HN ]

Re:Show HN: SFTPGo 0.9.6 by jay_wild on Sunday March 08, 2020 @12:35PM (#22518931)

Cowrie [0] provides an SFTP and Telnet honeypot and you can configure the filesystem to serve your desired files. Not quite a passthrough for legitimate use, unfortunately

[0]: https://github.com/cowrie/cowrie

[ Parent | on HN ]

Re:Show HN: SFTPGo 0.9.6 by SteveNuts on Sunday March 08, 2020 @04:14PM (#22520273)

I always worry that if I do something like this it'll cause the malicious person to spend extra effort and attention on a real attack.

Because that's what I'd do if I hit a honeypot...

[ Parent | on HN ]

Re:Show HN: SFTPGo 0.9.6 by dillonmckay on Sunday March 08, 2020 @06:42PM (#22521151)

Fair point.

[ Parent | on HN ]

Re:Show HN: SFTPGo 0.9.6 by nolok on Sunday March 08, 2020 @11:21AM (#22518432)

I've always imagined the risk of someone doing that on purpose to something they then post on /r/opendirectories

Most of those people seem to grab and open those files without any security measures, docx, pdf, archives, often .exe

[ Parent | on HN ]