8000 Support/Ignore parentesis (again?) · Issue #1216 · cowrie/cowrie · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Support/Ignore parentesis (again?) #1216
Closed
@mindsolve

Description

@mindsolve

Describe the bug
Cowrie does not support parentesis around commands.
It seems like whatever is currently probing my honeypot, is using parentesis to identifiy a honeypot like so:
(uname -srmo) [which fails in cowrie: -bash: (uname: command not found]

To Reproduce
Steps to reproduce the behavior:

  1. Connect to honeypot
  2. Enter (uname -srmo) (or any command inside)
  3. Observe problem

Expected behavior
uname -srmo is run, or broader: cowrie ignores/emulates the parentesis.

Server (please complete the following information):

  • OS: Ubuntu 18.04 (Linux 4.15.0-46-generic #49-Ubuntu SMP Wed Feb 6 09:33:07 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux)
  • Python: Python 3.6.8
  • Cowrie: e8d5df0 (master; today)

Additional context
I found this old issue: #361 ("Add shell support for parenthesis" from 2016), which has been closed as "a fix was merged". Has this been accidentally removed?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0