Skip to content

Latest commit

 

History

History
53 lines (44 loc) · 2.01 KB

README.md

File metadata and controls

53 lines (44 loc) · 2.01 KB
Raw

Kippo-Graph

Kippo-Graph is a full featured script to visualize statistics for a Kippo based SSH honeypot.

It uses the Libchart PHP chart drawing library by Jean-Marc Trémeaux, QGoogleVisualizationAPI PHP Wrapper for Google's Visualization API by Thomas Schäfer, RedBeanPHP library by Gabor de Mooij, MaxMind and geoPlugin geolocation technology.

REQUIREMENTS:

  1. PHP version 5.3.4 or higher.
  2. The following packages: libapache2-mod-php5, php5-mysql, php5-gd, php5-curl.

On Ubuntu/Debian:

apt-get update && apt-get install -y libapache2-mod-php5 php5-mysql php5-gd php5-curl

/etc/init.d/apache2 restart

QUICK INSTALLATION:

wget http://bruteforce.gr/wp-content/uploads/kippo-graph-VERSION.tar.gz

mv kippo-graph-VERSION.tar.gz /var/www/html

cd /var/www/html

tar zxvf kippo-graph-VERSION.tar.gz

mv kippo-graph-VERSION kippo-graph

cd kippo-graph

chmod 777 generated-graphs

cp config.php.dist config.php

nano config.php #enter the appropriate values

Browse to http://your-server/kippo-graph to view or generate the honeypot charts and statistics.

Note 1: If you choose to disable REALTIME_STATS in your config.php file it is advisable to setup a cron job to update the charts in the background. The recommended way to do that is to add the following line in your crontab with crontab -e (make sure to change the kippo-graph path if it's different):

@hourly cd /var/www/html/kippo-graph && php kippo-graph.php > /dev/null 2>&1

Note 2: If you want to use the Kippo-Scanner component you will have to allow Kippo-Graph's .htaccess file to take effect. You can do this by editing your Apache configuration file at /etc/apache2/apache2.conf and changing AllowOverride None to AllowOverride All for the /var/www/ Directory (only).

Note 3: To fully use the geolocation features (Intensity Map) you will need to give CREATE TEMPORARY TABLES rights to your MySQL database user (most likely it has already been done).