Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

GreedyBear

Threat Intel Platform for T-POTs

GitHub 168 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4450 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

thug

Python low-interaction honeyclient

GitHub 1020 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 42.3k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 61 Python

T-Pot

The All In One Multi Honeypot Platform ๐Ÿ

GitHub 8760 C GPL-3.0
deception docker elk honeypot network-security security t-pot

ochi

Website GitHub 34 Go GPL-3.0
honeypot visualization

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 58 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Glutton

Generic Low Interaction Honeypot

GitHub 295 Go MIT
hacktoberfest honeypot

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 163 Zeek

Old Projects

Conpot

ICS/SCADA honeypot

GitHub 1431 Python GPL-2.0
hacktoberfest honeypot ics python scada security

TANNER

He who flays the hide

GitHub 231 Python GPL-3.0
honeypot security

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 936 Python MIT

dionaea

Home of the dionaea honeypot

Website GitHub 787 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 476 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 21 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1713 Python

Droidbox

Dynamic analysis of Android apps

GitHub 795 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5910 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 95 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 852 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

R1sh0bh-1 opened a pull request in intelowlproject/GreedyBear. ยท at February 13, 2026
10658 additions and 23920 deletions in 13 changed files.
AnshSinghal opened a pull request in intelowlproject/IntelOwl. ยท at February 13, 2026
155 additions and 12 deletions in 7 changed files.
regulartim pushed to intelowlproject/GreedyBear ยท at February 12, 2026
bbc92f1 Include Python version in virtualenv cache key in CI. Closes โ€ฆ
hirak214 opened a pull request in mitmproxy/mitmproxy. ยท at February 12, 2026
189716 additions and 137700 deletions in 1487 changed files.
mlodic pushed to intelowlproject/IntelOwl ยท at February 12, 2026
00e92a9 fix: add background color to TLP badges and include TLP in โ€ฆ
tklengyel pushed to tklengyel/drakvuf ยท at February 11, 2026
1 commit to tklengyel/drakvuf
51aef99 injector: Improve shellexecute method (#1857)
lups2000 pushed to mitmproxy/mitmproxy ยท at February 11, 2026
1 commit to mitmproxy/mitmproxy
50ba950 Fix modify_body crash when replacement contains backslash โ€ฆ
eugenioseveri pushed to certego/BuffaLogs ยท at February 10, 2026
1 commit to certego/BuffaLogs
41c98d7 Update CHANGELOG for version 3.1.0 (#564)
Lorygold opened a pull request in certego/BuffaLogs. ยท at February 10, 2026
12 additions and 0 deletions in 1 changed files.
Anikets290799 opened a pull request in mushorg/conpot. ยท at February 6, 2026
9 additions and 0 deletions in 1 changed files.
vedantan150179-alt opened a pull request in honeynet/honeyscanner. ยท at February 6, 2026
72 additions and 5 deletions in 6 changed files.
tklengyel pushed to tklengyel/drakvuf ยท at February 1, 2026
1 commit to tklengyel/drakvuf
628114f syscalls: Fix NULL pointer crash when enumerating kernel โ€ฆ
soorya38 opened a pull request in honeynet/ochi. ยท at January 19, 2026