antivmdetection by nsmfoo

Script to create templates to use with VirtualBox to make vm detection harder

updated at May 11, 2024, 9:19 a.m.

42 +0

690 -1

122 +0

conpot by mushorg

ICS/SCADA honeypot

updated at May 11, 2024, 8:06 a.m.

95 +0

1,190 +2

406 +0

basic-auth-pot by bjeborn

bap - http Basic Authentication honeyPot

updated at May 10, 2024, 5:34 p.m.

1 +0

44 +1

4 +0

beelzebub by mariocandela

A secure low code honeypot framework, leveraging AI for System Virtualization.

updated at May 10, 2024, 4:41 p.m.

8 +0

580 +4

47 +1

fapro by fofapro

Fake Protocol Server

updated at May 10, 2024, 10:42 a.m.

30 +0

1,495 -2

173 +0

honeypots by qeeqbox

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

updated at May 10, 2024, 10:14 a.m.

22 +0

595 +3

105 +1

canarytokens by thinkst

Canarytokens helps track activity and actions on your network.

updated at May 10, 2024, 10:07 a.m.

46 -1

1,665 +4

248 -1

SentryPeer by SentryPeer

Protect your SIP Servers from bad actors at https://sentrypeer.org

updated at May 10, 2024, 8:22 a.m.

12 +0

148 +1

17 +1

sshesame by jaksi

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

updated at May 10, 2024, 7:02 a.m.

33 +0

1,416 +4

85 +1

vmcloak by hatching

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.

updated at May 10, 2024, 6:05 a.m.

40 +0

476 +1

118 +1

kippo_detect by andrew-morris

Quick proof of concept to detect a Kippo SSH honeypot instance externally

updated at May 10, 2024, 6 a.m.

8 +0

56 +1

12 +0

canarytokendetector by referefref

Detect and remove the presence of canary tokens

updated at May 10, 2024, 5:59 a.m.

1 +0

11 +1

1 +0

HellPot by yunginnanet

HellPot is a portal to endless suffering meant to punish unruly HTTP bots.

updated at May 10, 2024, 12:29 a.m.

5 +0

324 +2

27 +2

ddospot by aelth

NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot

updated at May 9, 2024, 1:51 p.m.

1 +0

39 +2

10 +1

glutton by mushorg

Generic Low Interaction Honeypot

updated at May 9, 2024, 12:46 p.m.

20 +0

227 +1

56 +2

dionaea by DinoTools

Home of the dionaea honeypot

updated at May 9, 2024, 12:37 p.m.

44 +0

681 +1

183 +1

ivre by ivre

Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more! Uses Nmap, Masscan, Zeek, p0f, etc.

updated at May 9, 2024, 8:36 a.m.

171 +0

3,314 +3

624 +0

thug by buffer

Python low-interaction honeyclient

updated at May 9, 2024, 2:55 a.m.

75 +0

959 +2

204 +0

mysql-honeypotd by sjinks

Low interaction MySQL honeypot written in C

updated at May 9, 2024, 1:34 a.m.

6 +0

29 +0

14 +0

ssh-honeypotd by sjinks

A low-interaction SSH honeypot written in C

updated at May 9, 2024, 1:25 a.m.

4 +0

11 +0

3 +0