vmcloak by hatching

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

created at April 2, 2014, 10:12 p.m.

40 +0

477 +1

118 +0

antivmdetection by nsmfoo

Script to create templates to use with VirtualBox to make vm detection harder

created at March 6, 2015, 1:11 p.m.

42 +0

692 +1

122 +0

pyrdp by GoSecure

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

created at Sept. 7, 2018, 7:17 p.m.

43 +0

1,443 +2

240 +1

dionaea by DinoTools

Home of the dionaea honeypot

created at Dec. 21, 2015, 8:13 p.m.

44 +0

681 -1

184 +1

HoneyPy by foospidy

A low to medium interaction honeypot.

created at Nov. 17, 2013, 12:53 a.m.

46 +0

456 -1

94 +0

canarytokens by thinkst

Canarytokens helps track activity and actions on your network.

created at July 30, 2015, 12:39 p.m.

46 +0

1,674 +5

250 +2

glastopf by mushorg

Web Application Honeypot

created at Nov. 15, 2012, 9:57 p.m.

52 +0

535 +1

174 +0

peepdf by jesparza

Powerful Python tool to analyze PDF documents

created at April 13, 2015, 8:47 p.m.

59 +0

1,247 +1

236 +0

opencanary by thinkst

Modular and decentralised honeypot

created at Aug. 5, 2015, 2:44 p.m.

71 +0

2,026 +5

345 +0

dcept by secureworks

A tool for deploying and detecting use of Active Directory honeytokens

created at March 2, 2016, 1:16 p.m.

73 +0

497 -1

108 +0

thug by buffer

Python low-interaction honeyclient

created at Feb. 20, 2012, 11:56 a.m.

75 +0

960 +1

204 +0

kippo by desaster

Kippo - SSH Honeypot

created at May 27, 2014, 6:13 p.m.

84 +0

1,587 +1

280 +0

rdpy by citronneur

Remote Desktop Protocol in Twisted Python

created at Oct. 12, 2013, 6:23 p.m.

92 +0

1,665 +0

546 +0

conpot by mushorg

ICS/SCADA honeypot

created at March 20, 2013, 1:04 p.m.

96 +1

1,194 +1

406 +0

cowrie by cowrie

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

created at May 12, 2015, 2:58 p.m.

123 +0

4,940 +9

853 +2

ivre by ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.

created at Sept. 12, 2014, 1:34 p.m.

171 +0

3,339 +11

625 +0

androguard by androguard

Reverse engineering and pentesting for Android applications

created at Sept. 12, 2014, 8:48 a.m.

241 +1

4,985 +10

1,045 +1