kippo
A medium interaction SSH honeypot designed to log brute force attacks and most importantly, the entire shell interaction
honeypotBlue Team
ToolhoneypotblueLinuxBlackArchPlatforms: Linux · Last verified September 6, 2026
A medium interaction SSH honeypot designed to log brute force attacks and most importantly, the entire shell interaction by the attacker.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on BlackArch with `pacman -S kippo` (or add the BlackArch repository to an existing Arch Linux install). See the official BlackArch tool listing and upstream homepage linked above for details.
