Repository Index

An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity

• ssh
• honeypot
• go
• golang

:honey_pot: A fake Django admin login screen page.

• python
• django

Fake sshd that logs ip addresses, usernames, and passwords.

Simulates enough of a Telnet connection in order to log failed login attempts.

Detect and log CVE-2019-19781 scan and exploitation attempts.

A honeypot for the Log4Shell vulnerability (CVE-2021-44228).

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

RDP honeypot

• suricata
• honeypot

NTP logger/honeypot

A SSH Server in Go that logs username/password combos

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

• security
• security-tools
• honeypot
• deception

A low/zero interaction ssh authentication logging honeypot

• ssh-server
• honeynet

Express honeypot for RFI and LFI bots: 310 fake vulnerable URLs, logs IP, geolocation and payloads. Docker bait server or app.use() middleware.

• nodejs
• honeypot
• express
• exploit

Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

• honeypot
• spring-boot
• tomcat

Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

• honeypot
• engineering
• python
• attacker

HTTP honeypot on autopilot

• canarytokens
• deception
• deception-technology
• honeypot

FTP honeypot in Node.js: logs every login and command, quarantines uploaded malware, plants honeytokens in bait files. One-line Docker image.

• blue-team
• cybersecurity
• deception
• docker