Debian Jessie: install and configure Kippo

Kippo requirements:

• python-pycryptopp
• zope
• python-twisted

Install all requirements
# apt-get install python-pycryptopp zope python-twisted
You need to add a user to run kippo, for instant we create user kippo (you can use any non admin user to run kippo since this service run on port above 1024).
# useradd kippo

Login as kippo and download kippo from github

$ wget --no-check-certificate https://github.com/desaster/kippo/archive/master.zip
unzip it
$ unzip master.zip
change directory to kippo-master i.e. /home/kippo/kippo-master
$ cd kippo-master/
copy and edit kippo.cfg
$ cp kippo.cfg.dist kippo.cfg
$ vi kippo.cfg
...
ssh_port = 2222
...
hostname = test
...
port and hostname can be change anything you wish. use any unused port above 1024.

You need to execute command below as root to update kippo "system" file and create iptables rule

# cd /home/kippo/kippo-master/
# ./utils/createfs.py > fs.pickle
Doing stuff
# iptables -t nat -A PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222
Note to remove iptables above
# iptables -t nat -D PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222

Use kippo user to start and stop kippo in directory /home/kippo/kippo-master/

to start kippo
$ ./start.sh
twistd (the Twisted daemon) 14.0.2
Copyright (c) 2001-2014 Twisted Matrix Laboratories.
See LICENSE for details.
Starting kippo in the background...
Generating new RSA keypair...
Done.
Generating new DSA keypair...
Done.
to stop kippo
$ ./stop.sh

References:

• https://linuxconfig.org/deployment-of-kippo-ssh-honeypot-on-ubuntu-linux
• https://github.com/desaster/kippo