TraSSH (“trash” + “SSH”) is a fake SSH server.
packcraft.pl, via make, generates a bogus SSH handshake. That’s basically a one-time operation.
trassh[.c], a “dæmon” (long-lived process), then serves that handshake to connecting clients, one at a time. trassh is expected to be launched & supervised by systemd.
The goals are to:
- waste the time & energy of bots in search of a genuine SSH server to hack
- gather intelligence about these bots (IP addresses, etc.)
- learn about the SSH protocol, cryptography, TCP, &c. while developing (or studying) the program.