hussh(1) General Commands Manual hussh(1) (NAME) hussh - SSH TCP (SYNOPSIS) hussh [] (DESCRIPTION) hussh SSH TCP ("direct-tcpip") . (jump host) SSH . . (honeypot) . PTY . hussh `[::]:2` . (OPTIONS) -c, --config TOML. . -B, --bind ( ). : `[::]:22` -K, --keygen Ed25519 OpenSSH stdout . -v, --verbose . . --help . --version . (CONFIGURATION) /etc/hussh.conf . : [[rules]] ssh_keys = [ "ssh-ed25519 AAAAC3Nyourkeyhere", ] # permit = ["*"] : [sshd] # ssh ( 22 ipv4 + ipv6) bind_addr = "[::]:22" [[rules]] # username = "proxy" ssh_keys = [ "ssh-ed25519 AAAAC3Nyourkeyhere", "ssh-ed25519 AAAAC3Nanotherkey", ] # permit = [ # "example.com:*", "127.0.0.1:*", # "*:443", ] # : [[rules]] ssh_keys = [ "ssh-ed25519 AAAAC3Nyourkeyhere", ] permit = [ # "127.0.0.1:8080", "[::1]:8080", ] (RULES SYNTAX) permit= (wildcard) . : HOST:PORT, IP:PORT IP . : example.com:443, 127.0.0.1:22, [::1]:22 HOST:*, IP:* IP . : example.com:*, 127.0.0.1:*, [::1]:* *:PORT IP . : *:443 *:*, * IP . * . : *:*, * (SSH CLIENT EXAMPLES) (jump host) SSH localhost : cat >> ~/.ssh/config < TCP ssh stdin/stdout: ssh -p 2 -W example.com:80 192.0.2.37 socks5 localhost:1080. ssh : ssh -p 2 -ND 1080 192.0.2.37 localhost:1337 localhost:8080 ssh: ssh -p 2 -NL 127.0.0.1:1337:127.0.0.1:8080 192.0.2.37 (HONEYPOT MODE) hussh (Honeypot) (combolists) . . json HTTP : # /etc/hussh.conf [honeypot] # SSH # spoof_server_id = "SSH-2.0-anything" # ( ) stderr log_bruteforce_passwords = true # HTTP POST json: # {"username":"root","password":"123456","src":"192.0.2.34:56789"} report_url_bruteforce_passwords = "https://example.com/report" # # / bait_password_bruteforce = true (AUTHORS) kpcyrd . : https://github.com/kpcyrd/hussh 2026-08-24 hussh(1)