Join us for the Honeynet Workshop 2024: May 27th–29th, Copenhagen, Denmark

Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 34.6k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 3139 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 17 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

thug

Python low-interaction honeyclient

GitHub 959 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 5954 C GPL-3.0
deception docker elk honeypot network-security security t-pot

Glutton

Generic Low Interaction Honeypot

GitHub 229 Go MIT
hacktoberfest honeypot

ochi

Website GitHub 23 Go GPL-3.0
honeypot visualization

WhisperPot

VoIP honeypot system

GitHub 6 Python MIT
honeypot voip

GreedyBear

Threat Intel Platform for T-POTs

GitHub 118 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 18 Python Apache-2.0

TANNER

He who flays the hide

GitHub 215 Python GPL-3.0
honeypot security

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 15 Go MIT

Conpot

ICS/SCADA honeypot

GitHub 1193 Python GPL-2.0
hacktoberfest honeypot ics python scada security

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 138 Zeek

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 431 Python GPL-3.0
hacktoberfest honeypot security

Kippo

SSH Honeypot

GitHub 1586 Python

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 743 Python MIT

Glastopf

Web Application Honeypot

Droidbox

Dynamic analysis of Android apps

GitHub 741 Python

Old Projects

dionaea

Home of the dionaea honeypot

Website GitHub 682 Python GPL-2.0
dionaea honeypot security

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5427 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 6 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 93 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 27 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 4 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 827 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

mhils pushed to mitmproxy/mitmproxy · at May 18, 2024
1 commit to mitmproxy/mitmproxy
0503fbb Update change_upstream_proxy.py (#6853)
fosple opened a pull request in mitmproxy/mitmproxy. · at May 17, 2024
1 additions and 1 deletions in 1 changed files.
mlodic pushed to intelowlproject/IntelOwl · at May 17, 2024
6e1f59e pcap_analyzers adjusts + new playbook for PCAP files + upgraded Suricata to v7 …
mlodic pushed to intelowlproject/IntelOwl · at May 17, 2024
6498cc6 tests
Swangeon opened a pull request in honeynet/honeyscanner. · at May 16, 2024
664 additions and 525 deletions in 3 changed files.
buffer published thug v6.7. 🎉 · at May 16, 2024
buffer pushed to buffer/thug · at May 16, 2024
1 commit to buffer/thug
8c1a168 Version 6.7
tklengyel pushed to tklengyel/drakvuf · at May 15, 2024
10 commits to tklengyel/drakvuf
e2594a0 Add clang source based coverage option (#1790) 44662f3 Fix index out of bounds error in procmon (#1792) 11ebb4b Make procmon code safer with potential TOCTOU path (#1793)
tklengyel pushed to tklengyel/drakvuf · at May 15, 2024
1 commit to tklengyel/drakvuf
33efb37 move NtWriteFile to return hook (#1791)
t3chn0m4g3 pushed to telekom-security/tpotce · at May 13, 2024
ef55a9d Update for T-Pot Mobile
t3chn0m4g3 pushed to telekom-security/tpotce · at May 11, 2024
996e8a3 Prepare for T-Pot Mobile
glaslos pushed to mushorg/glutton · at May 8, 2024
1 commit to mushorg/glutton
7ee444c fix default rule for tcp
glaslos pushed to mushorg/glutton · at May 8, 2024
1 commit to mushorg/glutton
cfb3e1f use a default config and rules
dependabot pushed to honeynet/ochi · at April 19, 2024
20 commits to honeynet/ochi
d6f0946 switch to svelte 12d390e use svelte more ae940c6 remove invalid import
tobiasfunke1 opened a pull request in honeynet/whisperpot. · at April 2, 2024
1 additions and 1 deletions in 1 changed files.
aristofanischionis pushed to honeynet/honeyscanner · at March 29, 2024
1 commit to honeynet/honeyscanner
03bb01e NVD API 2.0 support (#27)
Lorygold pushed to certego/BuffaLogs · at March 21, 2024
1 commit to certego/BuffaLogs
144c90a Cleaned venv from useless packages (#103)
Lorygold pushed to certego/BuffaLogs · at March 21, 2024
4 commits to certego/BuffaLogs
987d9a4 Added pytz required in celery_beat e56253e fix 2e18347 Updated CHANGELOG.md
saadali05 opened a pull request in mushorg/tanner. · at March 18, 2024
1 additions and 1 deletions in 1 changed files.
glaslos pushed to honeynet/ochi · at March 13, 2024
1 commit to honeynet/ochi
bc5d933 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (#104)