Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
Repository Index
56,638 visible repositories in the index
1–24 of 61 · Most stars
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
Remote Desktop Protocol in Twisted Python
Fake Protocol Server
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
:honey_pot: A fake Django admin login screen page.
- python
- django
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
Galah: An LLM-powered web honeypot.
Fake sshd that logs ip addresses, usernames, and passwords.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
A tool for deploying and detecting use of Active Directory honeytokens
Super Next generation Advanced Reactive honEypot
Credentials catching honeypot
- honeypot
- deception
- security
- security-tools
Python telnet honeypot for catching botnet binaries
Bluetooth Honeypot
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
A Wordpress Honeypot
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
- cybersecurity
- honeypot
- python
- ai
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
TR-069 Honeypot
Detect and log CVE-2019-19781 scan and exploitation attempts.
A honeypot for malware that propagates via USB storage devices