galah by 0x4D31

Galah: LLM-powered web honeypot. Wasting attackers' time with faker-than-ever HTTP responses!

updated at May 26, 2024, 9:52 p.m.

6 +0

300 +10

27 +1

tpotce by telekom-security

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

updated at May 26, 2024, 9:22 p.m.

189 +1

5,984 +27

1,004 +5

opencanary by thinkst

Modular and decentralised honeypot

updated at May 26, 2024, 4:03 p.m.

71 +0

2,026 +5

345 +0

ivre by ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.

updated at May 26, 2024, 9:09 a.m.

171 +0

3,339 +11

625 +0

glutton by mushorg

Generic Low Interaction Honeypot

updated at May 26, 2024, 4:57 a.m.

21 +0

230 +1

56 +0

beelzebub by mariocandela

A secure low code honeypot framework, leveraging AI for System Virtualization.

updated at May 26, 2024, 2:38 a.m.

8 +0

583 +3

48 +0

fibratus by rabbitstack

A modern tool for Windows kernel exploration and tracing with a focus on security

updated at May 26, 2024, 1:36 a.m.

71 -1

2,093 +6

183 +0

androguard by androguard

Reverse engineering and pentesting for Android applications

updated at May 26, 2024, 1:06 a.m.

241 +1

4,985 +10

1,045 +1

canarytokens by thinkst

Canarytokens helps track activity and actions on your network.

updated at May 26, 2024, 12:01 a.m.

46 +0

1,674 +5

250 +2

HellPot by yunginnanet

HellPot is a portal to endless suffering meant to punish unruly HTTP bots.

updated at May 25, 2024, 6:49 p.m.

6 +0

344 +11

28 +0

honeyLambda by 0x4D31

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

updated at May 25, 2024, 6:10 p.m.

31 +0

506 +1

55 +0

sshesame by jaksi

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

updated at May 25, 2024, 3 p.m.

33 +0

1,429 +1

85 +0

thug by buffer

Python low-interaction honeyclient

updated at May 25, 2024, 2:56 p.m.

75 +0

960 +1

204 +0

masscanned by ivre

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

updated at May 25, 2024, 1:44 p.m.

4 +0

96 +2

15 +0

mysql-honeypotd by sjinks

Low interaction MySQL honeypot written in C

updated at May 25, 2024, 12:56 p.m.

6 +0

30 +1

14 +0

endlessh by skeeto

SSH tarpit that slowly sends an endless banner

updated at May 25, 2024, 11 a.m.

89 +0

6,933 +20

270 +2

django-admin-honeypot by dmpayton

A fake Django admin login screen page.

updated at May 25, 2024, 12:21 a.m.

31 -1

1,005 +3

182 +0

vmcloak by hatching

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

updated at May 24, 2024, 6:46 p.m.

40 +0

477 +1

118 +0

antivmdetection by nsmfoo

Script to create templates to use with VirtualBox to make vm detection harder

updated at May 24, 2024, 6:45 p.m.

42 +0

692 +1

122 +0

cowrie by cowrie

Cowrie SSH/Telnet Honeypot https://cowrie.readthedocs.io

updated at May 24, 2024, 6:32 p.m.

123 +0

4,940 +9

853 +2