Cowrie Releases

Cowrie 3.0.15

Mon, 21 Sep 2026 03:13:19 GMT

Changes

Fix Earley shell-parser blow-up (#40597): unambiguous grammar, real pipelines and redirections (#40611 by @micheloosterhof)

Fixes

accept an empty password in userdb.txt (#40521 by @micheloosterhof)
parse /etc/passwd by line in finger (#40525 by @micheloosterhof)
prevent AlreadyQuit on clean shutdown for sqlite, mysql, postgresql plugins (#40592 by @I-am-Krish)
report a malformed cut field list instead of crashing (#40529 by @micheloosterhof)
use explicit collection_id for VirusTotal collections (#40580 by @jarihu)
annotate the finger test's passwd helper so mypy passes (#40613 by @micheloosterhof)
store directory modes, not decimal or file modes, for created directories (#40612 by @micheloosterhof)
raise ENOENT from fs.rmdir when the directory does not exist (#40614 by @micheloosterhof)
make fs.islink look at the entry instead of its target (#40615 by @micheloosterhof)
report an empty cp/mv destination instead of indexing it (#40534 by @micheloosterhof)

Maintenance

drop the unused backend_pool ping helper (#40616 by @micheloosterhof)
name the commit in the package version instead of a stale release number (#40618 by @micheloosterhof)
add setuptools-scm to the dev extra (#40620 by @micheloosterhof)
name the commit in the package version instead of a stale release number (#40622 by @micheloosterhof)

Plus 5 dependency updates.

Cowrie 3.0.14

Mon, 14 Sep 2026 03:15:33 GMT

Fixes

keep exec command usable when it is not valid UTF-8 (#40520 by @micheloosterhof)
register cowrie.urlhaus.submitted event id (#40584 by @jarihu)
rmdir and touch process all arguments (#40596 by @nkbeast)
space-separate ps COMMAND arguments (#40549 by @micheloosterhof)
write the shell prompt as UTF-8 (#40544 by @micheloosterhof)
escape attacker text in telegram messages (#40543 by @micheloosterhof)
decode the line buffer leniently for tab completion (#40537 by @micheloosterhof)
handle unknown curl content length (#40445 by @cyphercodes)
guard tab-completion against a missing client window size (#40434 by @Sanjays2402)
publish and reset the prometheus source-IP windows (#40542 by @micheloosterhof)
tolerate more malformed LLM prompt templates (#40552 by @micheloosterhof)
accept grep -m max-count (#40594 by @AzazelSensei)
guard printf against a malformed escape (#40535 by @micheloosterhof)

First contribution from @nkbeast, @cyphercodes, @Sanjays2402, @AzazelSensei. Thank you.

Plus 9 dependency updates.

Cowrie 3.0.13

Mon, 24 Aug 2026 01:06:31 GMT

Features

add URLhaus output plugin (#40568 by @jarihu)

Fixes

release integrity, ssh_proxy parity and DNS-rebinding in outbound downloads (#40510 by @micheloosterhof)
sqlite output drops file uploads and session input (#40511 by @micheloosterhof)
close the upload descriptor before renaming the temp file (#40553 by @micheloosterhof)
decode ttylog data leniently when converting to asciinema (#40548 by @micheloosterhof)
print real UTC in dig's WHEN line (#40530 by @micheloosterhof)
fall back to the default width on a non-numeric COLUMNS (#40536 by @micheloosterhof)
read rethinkdblog event timestamps as UTC (#40538 by @micheloosterhof)
log the proxy backend address as a string (#40550 by @micheloosterhof)
encode base64 interactive input as UTF-8 (#40528 by @micheloosterhof)
reassemble proxied SFTP messages by their length prefix (#40557 by @micheloosterhof)
keep the ftpget download running through CTRL-C (#40556 by @micheloosterhof)
expand an empty $@ / $* to no words (#40554 by @micheloosterhof)
handle a bare trailing CR in telnet proxy auth (#40551 by @micheloosterhof)
apply createfs's -v and -p flags (#40547 by @micheloosterhof)
reject a non-numeric uid/gid in fsctl chown/chgrp (#40546 by @micheloosterhof)
release misp session tracking when the session closes (#40541 by @micheloosterhof)
report an invalid grep pattern instead of raising re.error (#40533 by @micheloosterhof)
escape CEF extension values (#40527 by @micheloosterhof)
report whole days and years from durationHuman (#40526 by @micheloosterhof)
release dshield session state when the session closes (#40540 by @micheloosterhof)
append to the jsonlog logfile instead of truncating it (#40524 by @micheloosterhof)
let virustotal submit URLs it has never seen before (#40522 by @micheloosterhof)
hold a single sqlite connection in the output pool (#40523 by @micheloosterhof)
report the real size of an SFTP upload (#40555 by @micheloosterhof)
never stop an output plugin that failed to start (#40576 by @micheloosterhof)
report IPv6 download targets as unreachable (#40582 by @micheloosterhof)
report a malformed URL port in curl and wget (#40545 by @micheloosterhof)
survive an empty -c argument and non-UTF-8 stdin in sh (#40531 by @micheloosterhof)
decode bytes IP in ssh_proxy connect_to_backend for clean logging (#40518 by @abhi-0203)
catch OSError and process all arguments (#40583 by @I-am-Krish)

Maintenance

satisfy mypy on four test modules (#40578 by @micheloosterhof)
pin the auth answer the telnet proxy password test depends on (#40577 by @micheloosterhof)
pin the container's uid (#40579 by @micheloosterhof)
keep event ids, emitters, consumers and docs in step (#40575 by @micheloosterhof)

First contribution from @jarihu, @abhi-0203, @I-am-Krish. Thank you.

Plus 11 dependency updates.

Cowrie 3.0.12

Tue, 04 Aug 2026 05:22:12 GMT

Fixes

cap the size of shell input fed to the parser (#40441 by @micheloosterhof)
strip pip, setuptools and wheel from the runtime venv (#40446 by @micheloosterhof)

Plus 6 dependency updates.

Cowrie 3.0.11

Mon, 03 Aug 2026 02:32:59 GMT

Changes

fingerprinting with CI (#2791 by @micheloosterhof)
share the honeyfs tree across sessions (copy-on-write) (#40387 by @micheloosterhof)
Wait for async commands (wget/curl) in command substitution (#40425 by @micheloosterhof)
Give each shell its own working directory (#40428 by @micheloosterhof)
Output plugin cleanups: remove crashreporter, fix slack client reuse and timestamp option (#40426 by @micheloosterhof)
Give each shell its own user identity (#40429 by @micheloosterhof)
Feed a pipeline stage that finishes asynchronously (wget URL | sh) (#40431 by @micheloosterhof)
Keep a command's stdio wiring on the command (#40430 by @micheloosterhof)

Features

read stdin in grep when no files are given (#40371 by @micheloosterhof)
support the HAProxy PROXY protocol (#40372 by @micheloosterhof)
add a nix flake (#40433 by @micheloosterhof)

Fixes

run long pipelines flat instead of recursing per stage (#40373 by @micheloosterhof)
handle GreyNoise request failures instead of erroring (#40374 by @micheloosterhof)
handle failed HTTP requests in output plugins (#40375 by @micheloosterhof)
flush buffered frontend packets in proxy mode (#40376 by @micheloosterhof)
survive terminalProtocol teardown mid-dataReceived (#40268 by @micheloosterhof)
ignore CHANNEL_WINDOW_ADJUST for already-closed channels (#40378 by @micheloosterhof)
treat a bare = as a command name, not an assignment (#40379 by @micheloosterhof)
abort downloads that exceed download_limit_size (#40380 by @micheloosterhof)
treat an empty symlink target as a broken link (#40398 by @micheloosterhof)
re-authenticate returning attackers in AuthRandom (#40400 by @micheloosterhof)
use posixpath for emulated-filesystem paths (Windows support) (#40403 by @micheloosterhof)
make the outbound rate limiter case-insensitive per host (#40406 by @micheloosterhof)
apply rate limit, size limit and outbound bind to ftpget (#40407 by @micheloosterhof)
move wget/curl/nc rate-limit options to [shell] and document them (#40408 by @micheloosterhof)
harden DB output plugins against error-handler crashes and NULL-string rows (#40409 by @micheloosterhof)
harden scp upload parsing against crashes and file floods (#40410 by @micheloosterhof)
don't crash on attacker-controlled bytes that aren't valid UTF-8 (#40412 by @micheloosterhof)
harden telnet subsystem against malformed client input (#40411 by @micheloosterhof)
harden the LLM backend against attacker input and runaway API use (#40413 by @micheloosterhof)
refuse an out-of-sequence keyboard-interactive INFO_RESPONSE (#40414 by @micheloosterhof)
cache reversedns results instead of spent Deferreds (#40417 by @micheloosterhof)
reconcile event id consumers with the ids Cowrie emits (#40420 by @micheloosterhof)
ignore CHANNEL_REQUEST for an unknown or closed channel (#40419 by @micheloosterhof)
tftp IPv6 crash, missing rate limiter, unenforced size limit, and resolution TOCTOU (#40394) (#40422 by @micheloosterhof)
name temp backing files with a prefix and uuid (#40421 by @micheloosterhof)
nc no longer blocks the reactor with stdlib sockets (#40424 by @micheloosterhof)
declare ILogObserver on the log observer factory (#40427 by @micheloosterhof)

Maintenance

pin all GitHub Actions to full commit SHAs (#40363 by @micheloosterhof)
add security policy (SECURITY.md) (#40366 by @micheloosterhof)
add changelog and issues project URLs (#40367 by @micheloosterhof)
reproducible build metadata and runtime hardening (#40364 by @micheloosterhof)
add pip-audit dependency vulnerability scanning (#40365 by @micheloosterhof)
dispatch docker and pypi publish workflows from weekly release (#40377 by @micheloosterhof)
make pyright usable, then fix everything it finds (#40392 by @micheloosterhof)
plain-language overhaul of the documentation tree (#40418 by @micheloosterhof)
prune vacuous, tautological, and duplicate tests (#40432 by @micheloosterhof)

Plus 10 dependency updates.

Cowrie 3.0.10

Mon, 27 Jul 2026 12:29:30 GMT

Features

kafka output based on aiokafka (#40355 by @micheloosterhof)
kafka output based on aiokafka (#40326 by @rwakulszowa)

Fixes

accept bare-CR line endings at the telnet login prompt (PuTTY) (#40344 by @micheloosterhof)
stop logging a traceback for malformed telnet IAC traffic (#40345 by @micheloosterhof)

First contribution from @rwakulszowa. Thank you.

Cowrie 3.0.9

Wed, 22 Jul 2026 16:49:05 GMT

Fixes

prevent session hang from IPv4-embedded IPv6 download URLs (#40336 by @micheloosterhof)
handle TCP connect timeout in curl and wget downloads (#40337 by @micheloosterhof)
derive OptionParsingError from Exception (#40339 by @micheloosterhof)
resolve tftp target hostname before UDP I/O (#40340 by @micheloosterhof)
drop OpenSSH host-key rotation requests in ssh proxy (#40341 by @micheloosterhof)
run a shell reading channel stdin when bash is the exec command (#40342 by @micheloosterhof)
bind outbound downloads to out_addr so they don't leak the server IP (#40343 by @micheloosterhof)

Maintenance

bump mypy to 2.3.0 and mypy-zope to 1.0.16 (#40338 by @micheloosterhof)

Plus 3 dependency updates.

Cowrie 3.0.8

Mon, 20 Jul 2026 15:17:27 GMT

Fixes

block IPv4-mapped and embedded-IPv4 IPv6 addresses in outbound filter (#40329 by @micheloosterhof)
block non-globally-routable outbound targets (#40330 by @micheloosterhof)

Cowrie 3.0.7

Mon, 20 Jul 2026 11:49:54 GMT

Changes

fix broken postgresql output (#40313 by @dongdigua)

Features

support the exec shell builtin (#40308 by @micheloosterhof)

Fixes

guard against None transport in sendPacket (#40324) (#40325 by @fazalpsinfo-cmyk)

First contribution from @fazalpsinfo-cmyk, @dongdigua. Thank you.

Plus 9 dependency updates.

Cowrie 3.0.6

Mon, 13 Jul 2026 12:11:26 GMT

Changes

reduce duplicate-download logging to one congruent message (#40270 by @micheloosterhof)
Session-scoped event pipeline: attribute events at emission, delete the log-observer path (#40286 by @micheloosterhof)

Features

config-driven log levels and per-class twisted.logger diagnostics (#40312 by @micheloosterhof)

Fixes

clean up unhandled wget error logging (#40259 by @micheloosterhof)
release file handle before renaming captured logs on Windows (#40260 by @micheloosterhof)
reset exec idle timeout on inbound stdin (#40261 by @micheloosterhof)
capture exec-channel stdin in cat redirect output (#40262 by @micheloosterhof)
report bundled-resource directory reads as FileNotFoundError (#40263 by @micheloosterhof)
handle empty path in resolve_path and file tests (#40266 by @micheloosterhof)
avoid ZeroDivisionError in wget speed calculation (#40267 by @micheloosterhof)
drop and log malformed SSH packets instead of crashing (#40264 by @micheloosterhof)
annotate treq header dicts to match the expected type (#40272 by @micheloosterhof)
run async commands in scripts sequentially without cmdstack corruption (#40273 by @micheloosterhof)
keep the session alive when exit runs inside a command substitution (#40276 by @micheloosterhof)
make late tftp download callbacks safe after session close (#40280 by @micheloosterhof)
parse input queued while a command is running (#40299 by @micheloosterhof)
log telnet process end as an exit status, not a Failure repr (#40300 by @micheloosterhof)
write each jsonlog event in a single call to survive rotation (#40301 by @micheloosterhof)
survive a late second exit() from pending download callbacks (#40274 by @micheloosterhof)
queue mid-command input on the innermost shell (#40303 by @micheloosterhof)
ignore channel EOF/CLOSE for already-closed SSH channels (#40305 by @micheloosterhof)
resolve CNAME chains and AAAA records in communication_allowed (#40307 by @micheloosterhof)

Maintenance

upgrade treq to 26.7.0 and drop requests/urllib3 (#40271 by @micheloosterhof)
register the fake async command without shadowing the ClassVar (#40302 by @micheloosterhof)
build bcrypt from git on free-threaded 3.15 (#40304 by @micheloosterhof)
capture late download events through the session EventLog (#40306 by @micheloosterhof)

Plus 15 dependency updates.

Cowrie 3.0.5

Mon, 29 Jun 2026 13:11:11 GMT

Changes

Real command exit status: $?, && / ||, and exec exit-status (#40222 by @micheloosterhof)
Translate emulated-filesystem errors at the SFTP boundary (#40223 by @micheloosterhof)
Report "Bad file descriptor" for an out-of-range redirect fd (#40224 by @micheloosterhof)
Register backing files for command-less output redirections (#40226 by @micheloosterhof)
Discard data that arrives after the terminal protocol is torn down (#40227 by @micheloosterhof)
Remove empty download artifacts on early wget/curl exits (#40228 by @micheloosterhof)
Report "Is a directory" instead of disconnecting on a directory command (#40229 by @micheloosterhof)
Reject binary files passed to sh/bash instead of parsing their bytes (#40230 by @micheloosterhof)
Log a failed DNS lookup at info level, not as an "Unhandled Error" (#40231 by @micheloosterhof)
Comment on and collect VirusTotal uploads by file hash, not analysis id (#40234 by @micheloosterhof)
Log each telnet option negotiation once per connection (#40232 by @micheloosterhof)
Added OCSF output (#40233 by @JustSamAgain)
Reuse an existing VirusTotal collection instead of re-creating it (#40235 by @micheloosterhof)

Features

replace the shlex shell parser with a Lark grammar (#40219 by @micheloosterhof)
add su command for switching user identity (#40212 by @micheloosterhof)
emulate shell flow control (for/if/while/until/case, functions, test/[) (#40243 by @micheloosterhof)

Fixes

disconnect cleanly on duplicate KEXINIT during key exchange (#40206 by @micheloosterhof)
check init before stop/force-stop/status (#40236 by @micheloosterhof)
handle invalid IAC byte in telnet without crashing (#40218) (#40239 by @micheloosterhof)
escape non-printable bytes in logged untrusted input (#40240 by @micheloosterhof)
correct ConnectingDone typo in wget error handling (#40242 by @micheloosterhof)
tftp downloads produce empty hashes and crash the VirusTotal output (#40241 by @micheloosterhof)
type telnet transport protocol mock in test (#40245 by @micheloosterhof)

Maintenance

publish the docker image only from release tags (#40220 by @micheloosterhof)

First contribution from @JustSamAgain. Thank you.

Plus 5 dependency updates.

Cowrie 3.0.4

Mon, 22 Jun 2026 14:44:25 GMT

Changes

recording "last command" for DShield (#40162 by @jullrich)
Update requirements-output.txt (#40155 by @TrueDru)
Fix/cmdstack leak no input (#40170 by @micheloosterhof)
Address pyright diagnostics: real bugs and noise reduction (#40190 by @micheloosterhof)
Report directory and missing path-like commands with shell-accurate errors (#40194 by @micheloosterhof)

Features

implement chpasswd command simulation with logging (#40144 by @Sanchitha408)

Fixes

send bare LF on PTY-less exec channels (#40169 by @micheloosterhof)
persist shell variables and separate exported environment (#40171 by @micheloosterhof)
count nested subshells in command substitution (#40173 by @micheloosterhof)
emit session and TTY-log duration as integer milliseconds (duration_ms) (#40175 by @micheloosterhof)
look up MISP malware samples by MD5 (#40191 by @micheloosterhof)
save scp uploads as file content, not SCP wire framing (#40196 by @micheloosterhof)
stop telnet negotiation retries from crashing connection teardown (#40198 by @micheloosterhof)
deliver SSH session connectionLost exactly once on teardown (#40200 by @micheloosterhof)
skip stdin-log save when exec session sent no input (#40199 by @micheloosterhof)
honour output redirection for busybox-dispatched applets (#40202 by @micheloosterhof)
ignore NUL bytes in interactive shell instead of logging a warning (#40201 by @micheloosterhof)
restore initial NAWS negotiation for telnet connections (#40204 by @micheloosterhof)
resolve mypy errors in MISP output plugin and tests (#40203 by @micheloosterhof)
remove orphaned temp file on failed wget/curl download (#40205 by @micheloosterhof)

First contribution from @TrueDru, @Sanchitha408. Thank you.

Plus 7 dependency updates.

Cowrie 3.0.3

Mon, 15 Jun 2026 15:18:12 GMT

Changes

Add Signal messenger notification output plugin (#40154 by @Aryan-Shastri)

First contribution from @Aryan-Shastri. Thank you.

Cowrie 3.0.2

Mon, 08 Jun 2026 13:10:21 GMT

No changes recorded in the release notes. See the release on GitHub.

Plus 8 dependency updates.

Cowrie 3.0.1

Mon, 01 Jun 2026 15:25:43 GMT

Changes

Honor txtcmds_path for text commands (#40143 by @t3chn0m4g3)

First contribution from @t3chn0m4g3. Thank you.

Cowrie 3.0.0

Tue, 26 May 2026 09:15:05 GMT

Changes

Port dshield to treq, adopt modern submitapi, fix enrichment race (#40119 by @micheloosterhof)

Features

pip-installable cowrie state directory model (#40138 by @micheloosterhof)

Maintenance

fix mypy on Python 3.15 stubs; drop unused tftpy dependency (#40141 by @micheloosterhof)

Plus 4 dependency updates.

Cowrie 2.9.20

Mon, 25 May 2026 12:35:09 GMT

Features

embed file contents into bundled fs.pickle (#40137 by @micheloosterhof)

Fixes

read issue.net banner as UTF-8 with replacement (#40136 by @micheloosterhof)

Maintenance

delay non-security updates with 7-day cooldown (#40129 by @micheloosterhof)

Plus 9 dependency updates.

Cowrie 2.9.19

Mon, 18 May 2026 12:35:32 GMT

Changes

Bump default emulated OS fingerprint to Debian 12 / kernel 6.1 (#40090 by @Bierchermuesli)
Realign tests for Debian 12 fs.pickle; promote dump tool to cowrie.scripts.dumpfs (#40101 by @micheloosterhof)
Clean up artifacts that leaked through #40101 squash-merge (#40102 by @micheloosterhof)
license: add SPDX headers and REUSE compliance (#2935 by @micheloosterhof)
Bump Twisted to 26.4.0 and adopt its stricter typing (#40117 by @micheloosterhof)
Port malshare and cuckoo output plugins to treq (#40118 by @micheloosterhof)

Maintenance

type test_tftp.py and test_ftpget.py properly for mypy (#40111 by @micheloosterhof)

Plus 13 dependency updates.

Cowrie 2.9.18

Mon, 04 May 2026 11:07:41 GMT

Changes

LLM Anthropic support + Configurable context prompt (#38602 by @Bierchermuesli)

Plus 6 dependency updates.

Cowrie 2.9.17

Mon, 13 Apr 2026 10:50:19 GMT

No changes recorded in the release notes. See the release on GitHub.

Plus 1 dependency update.