Repository Index

The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

• pypi
• monitoring-tool
• network-analysis
• malware-analysis

Galah: An LLM-powered web honeypot.

• golang
• honeypot
• llm
• openai

honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway

• honeytoken
• honeypot
• security
• deception

Super Next generation Advanced Reactive honEypot

• honeypot
• security
• hacktoberfest

Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features

• cybersecurity
• honeypot
• python
• ai

Detect and log CVE-2019-19781 scan and exploitation attempts.

A honeypot proxy for mongodb. When run, this will proxy and log all traffic to a dummy mongodb server.

• mongodb
• proxy
• honeypot
• security

Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.

• backdoor
• honeypot
• incident-response
• security

A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability.

• security
• security-tools
• vulnerability
• honeypot

observation camera honeypot

Troje is a honeypot built around lxc containers. It will run each connection with the service within a seperate lxc container.

K8s API Honeypot with Active Defense Capabilities

• never
• going
• to
• give

framework for a high interaction SSH honeypot

FTP Honeypot

WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.

• security
• security-tools
• honeypot
• deception

An uploader honeypot designed to look like poor website security.

Express honeypot for remote file inclusion (RFI) and local file inclusion (LFI).

• nodejs
• honeypot
• express
• exploit

A simple low-interaction port monitoring honeypot.

• low-interaction-honeypot
• honeypot
• shell
• netcat

Docker container running cowrie with DShield output enabled.

A SSH honeypot written in Go

Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.

• honeypot
• engineering
• python
• attacker

HTTP honeypot on autopilot

• canarytokens
• deception
• deception-technology
• honeypot