Hacker GitHub

← All repos

skeeto/endlessh

View on GitHub ↗ ★ 8,573 C

SSH tarpit that slowly sends an endless banner

18 mentions on Hacker News by 18 people: 2 stories, 16 comments · first 2019-03-24 · latest 2025-04-30

Mentions per year 18 mentions · busiest year 2020 (5)
20082026
AllStoriesComments NewestTopOldest
  1. There is a similar thing for ssh servers, called endlessh ( https://github.com/skeeto/endlessh ). In the ssh protocol the client must wait for the server to send back a banner when it first connects, but there is no limit for the size of…
    comment by gherard5555 · 2025-04-30 · in I use zip bombs to protect my server
  2. Check this out if you want to stop this behavior... https://github.com/skeeto/endlessh
    comment by j_walter · 2025-04-29 · in I use zip bombs to protect my server
  3. Nice idea! Btw, such reverse slow-loris “attack” is called a tarpit. SSH tarpit example: https://github.com/skeeto/endlessh
    comment by ku1ik · 2024-12-30 · in AI companies cause most of traffic on forums
  4. Or a tar pit: https://github.com/skeeto/endlessh
    comment by timschmidt · 2024-12-26 · in Portspoof: Emulate a valid service on all 65535 TCP ports
  5. …that slowly sends a message to bots to keep them (and their bandwidth, memory, and CPUs) occupied: https://github.com/skeeto/endlessh?tab=readme-ov-file
    comment by throwitaway1123 · 2024-06-16 · in What You Get After Running an SSH Honeypot for 30 Days
  6. …a simple, single-threaded, standalone C program. It uses poll() to trap multiple clients at a time. https://github.com/skeeto/endlessh
    comment by kenniskrag · 2023-06-02 · in Brute.Fail: Watch brute force attacks fail in real time
  7. if you have people wanting SSH, there's this: https://github.com/skeeto/endlessh
    comment by return_to_monke · 2023-01-29 · in Ask HN: Best Way to Mess with Hackers?
  8. You could try to put them in a tar pit! https://github.com/skeeto/endlessh
    comment by photoGrant · 2022-12-21 · in Ask HN: How to protect against endless SSH login attempts to my server?
  9. May I humbly suggest https://github.com/skeeto/endlessh for both fun and profit
    comment by twalla · 2022-08-29 · in Large scale Internet SSH brute force attacks seem to have stopped here
  10. This is not the best solution (fail2ban and 2fa would be better) but https://github.com/skeeto/endlessh is a neat tool if you want to annoy someone with unsophisticated scripts. It’s worth noting that annoying a script kiddie might get you…
    comment by notsound · 2022-05-02 · in I won free load testing
  11. The post is referring to this: https://github.com/skeeto/endlessh I'm guessing that the person you replied to is referring to the same.
    comment by c0wb0yc0d3r · 2021-09-25 · in AS13335 doing SSH scanning
  12. …If you want to help secure the interwebs, host this tarpit to try to slow down network scanners: https://github.com/skeeto/endlessh
    comment by defend · 2020-09-21 · in Moving your SSH port isn’t security by obscurity
  13. …referenced in the past. Here's an article that talks about this and other SSH tarpits[1]. [0]: https://github.com/skeeto/endlessh [1]: https://nullprogram.com/blog/2019/03/22/
    comment by belak · 2020-09-21 · in Moving your SSH port isn’t security by obscurity
  14. Services like that are typically called tarpits, for SSH you can use Endlessh: https://github.com/skeeto/endlessh
    comment by isbvhodnvemrwvn · 2020-09-21 · in Moving your SSH port isn’t security by obscurity
  15. …on port 22 isn't going to stop an attacker, but it will slow the ssh scans down for everyone. https://github.com/skeeto/endlessh
    comment by draugadrotten · 2020-09-11 · in Security by obscurity is underrated
  16. You may be interested in an SSH tarpit like Endlessh [1]. [1]: https://github.com/skeeto/endlessh
    comment by lwhsiao · 2019-07-04 · in A better zip bomb