The Honeynet Project is a leading international 501(c)(3) non-profit security research organization, dedicated to investigating the latest attacks and developing open source security tools to improve Internet security. With chapters around the world, our volunteers have contributed to fight against malware (such as Confickr), discovering new attacks and creating security tools used by businesses and government agencies all over the world.
Learn MoreThe Conpot team is proud to announce version 1.0.0. This is a platform rewrite, not a point release. The honeypot still emulates ICS/SCADA services so you can collect attacker intelligence, but the runtime, templates, logging sinks, and several protocol libraries are new.
Treat this as a breaking upgrade: migrate templates and log consumers, then re-validate Docker ports and deployment scripts.
IntelOwl’s analyzers do the heavy lifting of threat intelligence i.e. scanning observables against dozens of services and producing structured results. But analysis in isolation is only half the picture. The connectors are what close the loop: they take those results and push them out to external platforms like MISP, OpenCTI, and YETI for further correlation, or to communication tools like Slack for real-time alerting.
Our GSoC student Krishna Awasthi spent three months working under the supervision of Tim Leonhard on GreedyBear and a new companion project, tpot-payload-server, building a complete pipeline to capture, quarantine, and share the malware payload files that T-Pot honeypots collect from live attackers.
Read on for an overview of the project, the technical decisions behind it, and what shipped.
Student: Krishna Awasthi (opbot-xd)
Mentors: Tim Leonhard
Organization: The Honeynet Project
Project: GreedyBear ยท tpot-payload-server
I spent this summer as a GSoC contributor on GreedyBear under the mentorship of Tim Leonhard, refactoring its hardcoded dashboard into a configuration-driven widget system with a drag-and-drop admin editor and backend persistence.
Mentor: Tim Leonhard
Organization: The Honeynet Project
Project: GreedyBear: Dashboard Modularization
The goal of my project was to modularize the GreedyBear dashboard.
Before this project, every widget - its type, data source, position, and column span was hardcoded directly in Dashboard.jsx. Adding a new chart meant editing the layout file by hand, and there was no way for an admin to customize the dashboard without touching source code and redeploying.
Our GSoC student Dorna Raj Gyawali spent three months working under the supervision of Tim Leonhard on the GreedyBear project, focusing on introducing an Event Collector API to make it easier for external honeypots and sensors to submit IOC events to GreedyBear.
Read on for an overview of their achievements and how they successfully contributed towards GreedyBear and some considerations for the future.
Student: Dorna Raj Gyawali (drona-gyawali)
Mentors: Tim Leonhard