Repository Index

GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026

ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits

• linux
• security
• kernel
• rootkit

Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.

• networking
• udp
• ipv6
• ipv4

Incident Response Triage - Windows Evidence Collection for Forensic Analysis

Content discovery and fuzzing with HTTP/3 support (100k requests per second)

Spam Honeypot with Intelligent Virtual Analyzer

Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design

• exploit
• php
• php2shell
• php2shell-cve

The VBCorLib framework brings many of the powerful .NET classes to VB6.

• collections
• hashing
• biginteger
• encoding

A mysqldump anonymizer

• mysqldump
• anonymizer
• database-anonymizer
• rgpd

Scans SPF and DMARC records for issues that could allow email spoofing.

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Randomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.

TR-069 Honeypot

An integrated security system for applications built on component

Detect and log CVE-2019-19781 scan and exploitation attempts.

Go session management for web servers (including support for Google App Engine - GAE).

• gae
• http-session
• session-management

PHP CVE-2026-109618/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12

• cve-2026-109618
• cve-2026-109619
• exploit
• memory-corruption

Run basic functions from stripped binaries cross platform

eBPF Information Flow Enforcement for AI Agent safety, security and effectiveness

• ebpf
• harness
• ifc
• policy-engine

Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository

Open Source Telnet Honeypot

This repository contains reverse engineering results and resources for a few specific car models of a very specific car manufacturer. Please don't sue.

• car-hacking
• automotive-security

Cake Fuzzer is a project that is meant to help automatically and continuously discover vulnerabilities in web applications created based on specific frameworks with very limited false positives.

• cybersecurity
• hacking
• iast
• dast

A honeypot for malware that propagates via USB storage devices