1.telekom-security / tpotce
🍯 T-Pot - The All In One Multi Honeypot Platform 🐝
+631 stars
from 9,063 · score 6.45
Trending repositories
Ranked by Attention Score: stars gained over the last 180 complete days
42 repositories by Attention Score · May 9, 2026 – Nov 4, 2026 (UTC)
2.cowrie / cowrie
Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/
+361 stars
from 6,300 · score 5.89
3.BlessedRebuS / Krawl
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
- anti-crawling
- cloud-native
- crawler
- deception
- honeypot
- kubernetes
- +11 more
+309 stars
from 519 · score 5.74
4.beelzebub-labs / beelzebub
A secure low code deception runtime framework, leveraging AI for System Virtualization.
- cybersecurity
- security
- honeypot
- framework
- go
- research-project
- +14 more
+266 stars
from 1,964 · score 5.59
+257 stars
from 2,837 · score 5.55
6.thinkst / canarytokens
Canarytokens helps track activity and actions on your network
+194 stars
from 2,045 · score 5.27
+186 stars
from 8,394 · score 5.23
8.mushorg / conpot
ICS/SCADA honeypot
+76 stars
from 1,463 · score 4.34
9.yunginnanet / HellPot
HellPot is a cross-platform portal to endless suffering meant to punish unruly HTTP bots.
+70 stars
from 1,099 · score 4.26
10.jaksi / sshesame
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
+54 stars
from 1,719 · score 4.01
11.0x4D31 / galah
Galah: An LLM-powered web honeypot.
- golang
- honeypot
- llm
- openai
- openai-api
- security
- +1 more
+34 stars
from 641 · score 3.56
12.qeeqbox / honeypots
30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)
- pypi
- monitoring-tool
- network-analysis
- malware-analysis
- credentials
- honeypot
- +5 more
+30 stars
from 959 · score 3.43
13.DinoTools / dionaea
Home of the dionaea honeypot
+29 stars
from 790 · score 3.40
14.honeytrap / honeytrap
Advanced Honeypot framework.
+22 stars
from 1,292 · score 3.14
15.buffer / thug
Python low-interaction honeyclient
- honeyclient
- client-honeypot
- python
- security-tools
- shellcode
- virustotal
- +1 more
+19 stars
from 1,027 · score 3.00
+14 stars
from 1,701 · score 2.71
+14 stars
from 1,602 · score 2.71
+14 stars
from 297 · score 2.71
19.OWASP / Python-Honeypot
OWASP Honeypot, Automated Deception Framework.
- owasp
- honeypot
- honeynet
- deception
- security
- cybersecurity
- +2 more
+13 stars
from 470 · score 2.64
+11 stars
from 268 · score 2.48
21.droberson / ssh-honeypot
Fake sshd that logs ip addresses, usernames, and passwords.
+10 stars
from 664 · score 2.40
+9 stars
from 1,726 · score 2.30
23.mushorg / snare
Super Next generation Advanced Reactive honEypot
+8 stars
from 479 · score 2.20
+8 stars
from 390 · score 2.20
+7 stars
from 597 · score 2.08
+7 stars
from 390 · score 2.08
27.0xBallpoint / trapster-community
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
- cybersecurity
- honeypot
- python
- ai
- deceptive
+7 stars
from 160 · score 2.08
28.sjhilt / GasPot
GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
+6 stars
from 144 · score 1.95
+5 stars
from 2,456 · score 1.79
+5 stars
from 1,076 · score 1.79
31.BinaryDefense / artillery
The Artillery Project is an open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods.
+5 stars
from 1,034 · score 1.79
32.SAP / cloud-active-defense
Add a layer of active defense to your cloud applications.
- cybersecurity
- deception
- decoy
- honeytoken
- infosec
- security
+5 stars
from 106 · score 1.79
33.sefcom / honeyplc
High-interaction Honeypot for PLCs and Industrial Control Systems
+5 stars
from 97 · score 1.79
+4 stars
from 229 · score 1.61
35.0x4D31 / honeyLambda
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
- honeytoken
- honeypot
- security
- deception
- lambda
- serverless
- +2 more
+3 stars
from 524 · score 1.39
+3 stars
from 279 · score 1.39
37.SentryPeer / SentryPeer
Protect your SIP Servers from bad actors at https://sentrypeer.org
- sip
- voip
- security-tools
- honeypot
- peer-to-peer
- p2p
- +14 more
+3 stars
from 209 · score 1.39
+3 stars
from 185 · score 1.39
+2 stars
from 346 · score 1.10
+2 stars
from 191 · score 1.10
+1 stars
from 471 · score 0.69
+1 stars
from 96 · score 0.69