Ranked by Attention Score: stars gained over the last 90 complete days
14 repositories by Attention Score · Aug 5, 2026 – Nov 2, 2026 (UTC)
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
an awesome list of honeypot resources
ICS/SCADA honeypot
RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact
Home of the dionaea honeypot
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
Super Next generation Advanced Reactive honEypot
OWASP Honeypot, Automated Deception Framework.
Credentials catching honeypot
HTTP honeypot on autopilot
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features