Skip to content

Trixzyy/discord-ssh-logging

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 

Repository files navigation

SSH Logging to Discord

This script enhances the functionality of Alexander Henderson's original script for logging SSH sessions to Discord. The original script and blog post can be found here, and credit goes to Alexander Henderson (alexandzors).

Overview

This Bash script is designed to be added to /sbin/ and made executable. It integrates with the SSH PAM (Pluggable Authentication Modules) to log SSH session events, such as login and logout, to a Discord channel through a webhook.

Preview

Preview GIF

Installation

  1. Copy the Script:

    • Copy the script to /sbin/ and make it executable:
      sudo touch /sbin/sshd-login
      sudo chmod +x /sbin/sshd-discord-login.shsudo chmod +x /sbin/sshd-login
      sudo chown root:root /sbin/sshd-login
      sudo nano /sbin/sshd-login
  2. Edit PAM Configuration:

    • Open /etc/pam.d/sshd in a text editor.
    • Add the following line to the bottom of the file:
      session optional pam_exec.so /sbin/sshd-discord-login.sh
      
  3. Set Permissions for Logging:

    • Ensure the log file has the correct permissions:
      sudo touch /var/log/seen_ips.log
      sudo chmod +x /var/log/seen_ips.log
      sudo chown root:root /var/log/seen_ips.log
  4. Set Configuration Variables:

    • Edit the script and set the WEBHOOK_URL, DISCORDUSER, and URGENT_ROLE variables to appropriate values.
  5. Restart SSH Service:

    • Restart the SSH service for changes to take effect:
      sudo service sshd restart

Usage

Once installed, the script will send messages to the configured Discord channel when users log in or out via SSH. It differentiates between new and known remote hosts, providing additional context.

Credits

Disclaimer

This script is provided as-is without any warranty. Use it at your own risk, and ensure that you comply with your organization's policies and guidelines.