awesome-honeypots

Honeypot catalog

A curated collection of honeypot projects and tools for detecting and preventing malicious activity

an awesome list of honeypot resources

GitHub
9k stars
384 watching
1k forks
Language: Python
last commit: 5 months ago
Linked from 16 awesome lists

awesomeawesome-listhoneydhoneypotlist

awesome-pcaptools 3,143 9 months ago Useful in network traffic analysis
awesome-malware-analysis 12,073 7 months ago Some overlap here for artifact analysis

Contents / Honeypots
Delilah 23 over 9 years ago Elasticsearch Honeypot written in Python (originally from Novetta)
ESPot 27 over 10 years ago Elasticsearch honeypot written in NodeJS, to capture every attempts to exploit CVE-2014-3120
ElasticPot An Elasticsearch Honeypot
Elastic honey 186 over 9 years ago Simple Elasticsearch Honeypot
MongoDB-HoneyProxy 92 almost 2 years ago MongoDB honeypot proxy
NoSQLpot 101 over 1 year ago Honeypot framework built on a NoSQL-style database
mysql-honeypotd 32 about 1 month ago Low interaction MySQL honeypot written in C
MysqlPot 21 over 12 years ago MySQL honeypot, still very early stage
pghoney 18 8 months ago Low-interaction Postgres Honeypot
sticky_elephant 11 5 months ago Medium interaction postgresql honeypot
RedisHoneyPot 22 over 3 years ago High Interaction Honeypot Solution for Redis protocol
Express honeypot 17 11 months ago RFI & LFI honeypot using nodeJS and express
EoHoneypotBundle 36 8 months ago Honeypot type for Symfony2 forms
Glastopf 564 6 months ago Web Application Honeypot
Google Hack Honeypot Designed to provide reconnaissance against attackers that use search engines as a hacking tool against your resources
HellPot 898 about 1 month ago Honeypot that tries to crash the bots and clients that visit it's location
Laravel Application Honeypot 431 8 months ago Simple spam prevention package for Laravel applications
Nodepot 45 over 9 years ago NodeJS web application honeypot
PasitheaHoneypot 2 over 6 years ago RestAPI honeypot
Servletpot 14 over 11 years ago Web application Honeypot
Shadow Daemon Modular Web Application Firewall / High-Interaction Honeypot for PHP, Perl, and Python apps
StrutsHoneypot 72 almost 8 years ago Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
WebTrap 64 almost 7 years ago Designed to create deceptive webpages to deceive and redirect attackers away from real websites
basic-auth-pot (bap) 47 about 10 years ago HTTP Basic Authentication honeypot
bwpot 26 almost 6 years ago Breakable Web applications honeyPot
django-admin-honeypot 1,031 9 months ago Fake Django admin login screen to notify admins of attempted unauthorized access
drupo 57 over 5 years ago Drupal Honeypot
galah 440 3 months ago an LLM-powered web honeypot using the OpenAI API
honeyhttpd 44 7 months ago Python-based web server honeypot builder
honeyup 27 about 2 months ago An uploader honeypot designed to look like poor website security
modpot 54 8 months ago Modpot is a modular web application honeypot framework and management application written in Golang and making use of gin framework
owa-honeypot 66 over 1 year ago A basic flask based Outlook Web Honey pot
phpmyadmin_honeypot 66 almost 7 years ago Simple and effective phpMyAdmin honeypot
shockpot WebApp Honeypot for detecting Shell Shock exploit attempts
smart-honeypot 17 over 10 years ago PHP Script demonstrating a smart honey pot

Contents / Honeypots / Snare/Tanner
Snare 450 7 months ago Super Next generation Advanced Reactive honeypot
Tanner 223 5 months ago Evaluating SNARE events

Contents / Honeypots
stack-honeypot 23 almost 11 years ago Inserts a trap for spam bots into responses
tomcat-manager-honeypot 11 over 7 years ago Honeypot that mimics Tomcat manager endpoints. Logs requests and saves attacker's WAR file for later study

Contents / Honeypots / WordPress honeypots
HonnyPotter 32 almost 7 years ago WordPress login honeypot for collection and analysis of failed login attempts
HoneyPress 6 about 4 years ago Python based WordPress honeypot in a Docker container
wp-smart-honeypot 28 over 7 years ago WordPress plugin to reduce comment spam with a smarter honeypot
wordpot 180 almost 2 years ago WordPress Honeypot

Contents / Honeypots
Python-Honeypot 443 4 months ago OWASP Honeypot, Automated Deception Framework
ADBHoney 161 2 months ago Low interaction honeypot that simulates an Android device running Android Debug Bridge (ADB) server process
AMTHoneypot 17 11 months ago Honeypot for Intel's AMT Firmware Vulnerability CVE-2017-5689
ddospot 52 about 4 years ago NTP, DNS, SSDP, Chargen and generic UDP-based amplification DDoS honeypot
dionaea 719 6 months ago Home of the dionaea honeypot
dhp 30 over 4 years ago Simple Docker Honeypot server emulating small snippets of the Docker HTTP API
DolosHoneypot 2 over 6 years ago SDN (software defined networking) honeypot
Ensnare 66 over 7 years ago Easy to deploy Ruby honeypot
Helix 40 about 1 year ago K8s API Honeypot with Active Defense Capabilities
honeycomb_plugins 27 about 1 year ago Plugin repository for Honeycomb, the honeypot framework by Cymmetria
https://honeydb.io/downloads [honeydb] ( ) - Multi-service honeypot that is easy to deploy and configure. Can be configured to send interaction data to to HoneyDB's centralized collectors for access via REST API
honeyntp 52 almost 11 years ago NTP logger/honeypot
honeypot-camera 50 over 9 years ago Observation camera honeypot
honeypot-ftp 30 12 months ago FTP Honeypot
honeypots 704 about 2 months ago 25 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc, mssql, elastic, ldap, ntp, memcache, snmp, oracle, sip and irc)
honeytrap 1,226 over 1 year ago Advanced Honeypot framework written in Go that can be connected with other honeypot software
HoneyPy 461 10 months ago Low interaction honeypot
Honeygrove 20 over 3 years ago Multi-purpose modular honeypot based on Twisted
Honeyport 43 almost 8 years ago Simple honeyport written in Bash and Python
Honeyprint 19 almost 9 years ago Printer honeypot
Lyrebird Modern high-interaction honeypot framework
MICROS honeypot 15 over 6 years ago Low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS)
node-ftp-honeypot 5 over 1 year ago FTP server honeypot in JS
pyrdp 1,556 7 months ago RDP man-in-the-middle and library for Python 3 with the ability to watch connections live or after the fact
rdppot 63 over 5 years ago RDP honeypot
RDPy 1,694 over 3 years ago Microsoft Remote Desktop Protocol (RDP) honeypot implemented in Python
SMB Honeypot 47 almost 4 years ago High interaction SMB service honeypot capable of capturing wannacry-like Malware
Tom's Honeypot 26 over 9 years ago Low interaction Python honeypot
Trapster Commmunity 28 about 1 month ago Modural and easy to install Python Honeypot, with comprehensive alerting
troje 45 over 10 years ago Honeypot that runs each connection with the service within a separate LXC container
WebLogic honeypot 32 over 4 years ago Low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware
WhiteFace Honeypot 5 over 9 years ago Twisted based honeypot for WhiteFace
DemonHunter 61 over 6 years ago Low interaction honeypot server
canarytokendetector 19 about 1 year ago Tool for detection and nullification of Thinkst CanaryTokens
honeydet 85 about 1 month ago Signature based honeypot detector tool written in Golang
kippo_detect 56 about 10 years ago Offensive component that detects the presence of the kippo honeypot
Conpot 1,258 11 months ago ICS/SCADA honeypot
GasPot 139 9 months ago Veeder Root Gaurdian AST, common in the oil and gas industry
SCADA honeynet Building Honeypots for Industrial Networks
gridpot 56 almost 10 years ago Open source tools for realistic-behaving electric grid honeynets
scada-honeynet Mimics many of the services from a popular PLC and better helps SCADA researchers understand potential risks of exposed control system devices
CitrixHoneypot 114 about 5 years ago Detect and log CVE-2019-19781 scan and exploitation attempts
Damn Simple Honeypot (DSHP) 16 over 8 years ago Honeypot framework with pluggable handlers
dicompot 24 over 1 year ago DICOM Honeypot
IPP Honey A honeypot for the Internet Printing Protocol
Log4Pot 91 about 2 months ago A honeypot for the Log4Shell vulnerability (CVE-2021-44228)
Masscanned 109 about 1 month ago Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise
medpot 24 8 months ago HL7 / FHIR honeypot
NOVA 75 over 1 year ago Uses honeypots as detectors, looks like a complete system
OpenFlow Honeypot (OFPot) 23 about 12 years ago Redirects traffic for unused IPs to a honeypot, built on POX
OpenCanary 2,350 about 2 months ago Modular and decentralised honeypot daemon that runs several canary versions of services that alerts when a service is (ab)used
ciscoasa_honeypot 51 about 6 years ago A low interaction honeypot for the Cisco ASA component capable of detecting CVE-2018-0101, a DoS and remote code execution vulnerability
miniprint 202 over 1 year ago A medium interaction printer honeypot
Hale 188 over 2 years ago Botnet command and control monitor
dnsMole Analyses DNS traffic and potentionaly detect botnet command and control server activity, along with infected hosts
ipv6-attack-detector 39 over 4 years ago Google Summer of Code 2012 project, supported by The Honeynet Project organization
Frida Inject JavaScript to explore native apps on Windows, Mac, Linux, iOS and Android
HIHAT Transform arbitrary PHP applications into web-based high-interaction Honeypots
Kippo-Malware Python script that will download all malicious files stored as URLs in a Kippo SSH honeypot database
Community Honey Network CHN aims to make deployments honeypots and honeypot management tools easy and flexible. The default deployment method uses Docker Compose and Docker to deploy with a few simple commands
Modern Honey Network Multi-snort and honeypot sensor management, uses a network of VMs, small footprint SNORT installations, stealthy dionaeas, and a centralized server for management
Tracexploit Replay network packets
LogAnon Log anonymization library that helps having anonymous logs consistent between logs and network captures
Honeypot-32764 16 almost 11 years ago Honeypot for router backdoor (TCP 32764)
WAPot 18 about 6 years ago Honeypot that can be used to observe traffic directed at home routers
Honeymole Deploy multiple sensors that redirect traffic to a centralized collection of honeypots
mitmproxy Allows traffic flows to be intercepted, inspected, modified, and replayed
Sysdig Open source, system-level exploration allows one to capture system state and activity from a running GNU/Linux instance, then save, filter, and analyze the results
Fibratus 2,246 about 1 month ago Tool for exploration and tracing of the Windows kernel
Ghost-usb 97 almost 10 years ago Honeypot for malware that propagates via USB storage devices
Kippo2MySQL Extracts some very basic stats from Kippo’s text-based log files and inserts them in a MySQL database
Kippo2ElasticSearch Python script to transfer data from a Kippo SSH honeypot MySQL database to an ElasticSearch instance (server or cluster)
Passive Network Audit Framework (pnaf) 32 over 6 years ago Framework that combines multiple passive and automated analysis techniques in order to provide a security assessment of network platforms
Antivmdetect 717 about 2 years ago Script to create templates to use with VirtualBox to make VM detection harder
VMCloak 487 8 months ago Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox
vmitools C library with Python bindings that makes it easy to monitor the low-level details of a running virtual machine
Hexgolems - Pint Debugger Backend 32 about 11 years ago Debugger backend and LUA wrapper for PIN
Hexgolems - Schem Debugger Frontend 142 about 9 years ago Debugger frontend
Androguard 5,324 about 2 months ago Reverse engineering, Malware and goodware analysis of Android applications and more
APKinspector 833 almost 12 years ago Powerful GUI tool for analysts to analyze the Android applications
Honeyperl Honeypot software based in Perl with plugins developed for many functions like : wingates, telnet, squid, smtp, etc
T-Pot 6,943 about 1 month ago All in one honeypot appliance from telecom provider T-Mobile
beelzebub 703 about 1 month ago A secure honeypot framework, extremely easy to configure by yaml 🚀
HFlow2 Data coalesing tool for honeynet/network analysis
Amun Vulnerability emulation honeypot
Artillery 330 over 4 years ago Open-source blue team tool designed to protect Linux and Windows operating systems through multiple methods
Bait and Switch Redirects all hostile traffic to a honeypot that is partially mirroring your production system
Bifrozt 5 almost 9 years ago Automatic deploy bifrozt with ansible
Conpot Low interactive server side Industrial Control Systems honeypot
Heralding 377 8 months ago Credentials catching honeypot
HoneyWRT 21 over 9 years ago Low interaction Python honeypot designed to mimic services or ports that might get targeted by attackers
Honeyd 11 almost 10 years ago See
Honeysink Open source network sinkhole that provides a mechanism for detection and prevention of malicious traffic on a given network
Hontel 161 almost 6 years ago Telnet Honeypot
KFSensor Windows based honeypot Intrusion Detection System (IDS)
LaBrea Takes over unused IP addresses, and creates virtual servers that are attractive to worms, hackers, and other denizens of the Internet
MTPot 104 almost 8 years ago Open Source Telnet Honeypot, focused on Mirai malware
SIREN 13 almost 7 years ago Semi-Intelligent HoneyPot Network - HoneyNet Intelligent Virtual Environment
TelnetHoney 1 almost 9 years ago Simple telnet honeypot
UDPot Honeypot 48 about 1 year ago Simple UDP/DNS honeypot scripts
Yet Another Fake Honeypot (YAFH) 9 about 7 years ago Simple honeypot written in Go
arctic-swallow 2 over 6 years ago Low interaction honeypot
fapro 1,528 almost 2 years ago Fake Protocol Server
glutton 247 2 months ago All eating honeypot
go-HoneyPot 43 over 5 years ago Honeypot server written in Go
go-emulators 10 almost 9 years ago Honeypot Golang emulators
honeymail 28 over 8 years ago SMTP honeypot written in Golang
honeytrap 94 over 7 years ago Low-interaction honeypot and network security tool written to catch attacks against TCP and UDP services
imap-honey 25 over 2 years ago IMAP honeypot written in Golang
mwcollectd Versatile malware collection daemon, uniting the best features of nepenthes and honeytrap
potd 29 over 4 years ago Highly scalable low- to medium-interaction SSH/TCP honeypot designed for OpenWrt/IoT devices leveraging several Linux kernel features, such as namespaces, seccomp and thread capabilities
portlurker 31 about 2 months ago Port listener in Rust with protocol guessing and safe string display
slipm-honeypot 17 over 4 years ago Simple low-interaction port monitoring honeypot
telnet-iot-honeypot 304 12 months ago Python telnet honeypot for catching botnet binaries
telnetlogger 238 almost 8 years ago Telnet honeypot designed to track the Mirai botnet
vnclowpot 23 over 5 years ago Low interaction VNC honeypot
Honeycomb Automated signature creation using honeypots
CC2ASN Simple lookup service for AS-numbers and prefixes belonging to any given country in the world
HPfriends Honeypot data-sharing platform

Contents / Honeypots / HPfriends
hpfriends - real-time social data-sharing Presentation about HPFriends feed system

Contents / Honeypots
HPFeeds 213 about 1 year ago Lightweight authenticated publish-subscribe protocol
PHARM Manage, report, and analyze your distributed Nepenthes instances
Impost Network security auditing tool designed to analyze the forensics behind compromised and/or vulnerable daemons
honeyfs 5 about 1 year ago Tool to create artificial file systems for medium/high interaction honeypots
Modern Honeynet Network Streamlines deployment and management of secure honeypots
Wireshark Extensions Apply Snort IDS rules and signatures against packet capture files using Wireshark
CWSandbox / GFI Sandbox
Capture-HPC-Linux
Capture-HPC-NG 11 about 13 years ago
Capture-HPC High interaction client honeypot (also called honeyclient)
HoneyBOT
HoneyC
HoneySpider Network 29 over 8 years ago Highly-scalable system integrating multiple client honeypots to detect malicious websites
HoneyWeb Web interface created to manage and remotely share Honeyclients resources
Jsunpack-n 163 almost 10 years ago
MonkeySpider
PhoneyC 25 over 9 years ago Python honeyclient (later replaced by Thug)
Pwnypot High Interaction Client Honeypot
Rumal Thug's Rumāl: a Thug's dress and weapon
Shelia Client-side honeypot for attack detection
Thug Python-based low-interaction honeyclient
Thug Distributed Task Queuing
Trigona
URLQuery
YALIH (Yet Another Low Interaction Honeyclient) 69 over 5 years ago Low-interaction client honeypot designed to detect malicious websites through signature, anomaly, and pattern matching techniques
Deception Toolkit
IMHoneypot 16 almost 9 years ago
peepdf 1,319 5 months ago Powerful Python tool to analyze PDF documents
HoneyBrid
Blacknet 22 10 months ago Multi-head SSH honeypot system
Cowrie 5,260 about 1 month ago Cowrie SSH Honeypot (based on kippo)
DShield docker 15 over 8 years ago Docker container running cowrie with DShield output enabled
endlessh 7,356 8 months ago SSH tarpit that slowly sends an endless banner. ( )
HonSSH 373 about 3 years ago Logs all SSH communications between a client and server
HUDINX 6 over 5 years ago Tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker
Kippo 1,633 about 1 year ago Medium interaction SSH honeypot
Kippo_JunOS 10 about 9 years ago Kippo configured to be a backdoored netscreen
Kojoney2 38 about 10 years ago Low interaction SSH honeypot written in Python and based on Kojoney by Jose Antonio Coret
Kojoney Python-based Low interaction honeypot that emulates an SSH server implemented with Twisted Conch
Longitudinal Analysis of SSH Cowrie Honeypot Logs 18 about 2 years ago Python based command line tool to analyze cowrie logs over time
LongTail Log Analysis @ Marist College Analyzed SSH honeypot logs
Malbait 8 9 months ago Simple TCP/UDP honeypot implemented in Perl
MockSSH 125 about 1 year ago Mock an SSH server and define all commands it supports (Python, Twisted)
cowrie2neo 7 over 7 years ago Parse cowrie honeypot logs into a neo4j database
go-sshoney 32 over 7 years ago SSH Honeypot
go0r 35 almost 10 years ago Simple ssh honeypot in Golang
gohoney 11 about 11 years ago SSH honeypot written in Go
hived 3 over 7 years ago Golang-based honeypot
hnypots-agent) 37 about 1 month ago SSH Server in Go that logs username and password combinations
honeypot.go 28 about 11 years ago SSH Honeypot written in Go
honeyssh 12 about 5 years ago Credential dumping SSH honeypot with statistics
hornet 22 over 6 years ago Medium interaction SSH honeypot that supports multiple virtual hosts
ssh-auth-logger 19 5 months ago Low/zero interaction SSH authentication logging honeypot
ssh-honeypot 631 3 months ago Fake sshd that logs IP addresses, usernames, and passwords
ssh-honeypot 26 about 6 years ago Modified version of the OpenSSH deamon that forwards commands to Cowrie where all commands are interpreted and returned
ssh-honeypotd 15 about 1 month ago Low-interaction SSH honeypot written in C
sshForShits 39 almost 5 years ago Framework for a high interaction SSH honeypot
sshesame 1,562 3 months ago Fake SSH server that lets everyone in and logs their activity
sshhipot 168 over 6 years ago High-interaction MitM SSH honeypot
sshlowpot 14 almost 5 years ago Yet another no-frills low-interaction SSH honeypot in Go
sshsyrup 96 almost 6 years ago Simple SSH Honeypot with features to capture terminal activity and upload to asciinema.org
twisted-honeypots 86 about 5 years ago SSH, FTP and Telnet honeypots based on Twisted
DShield Web Honeypot Project
Honeysnap
Honeywall
HoneyDrive
Honeeepi Honeypot sensor on a Raspberry Pi based on a customized Raspbian OS
TestDisk & PhotoRec
Capture BAT
DAVIX The DAVIX Live CD
Mail::SMTP::Honeypot Perl module that appears to provide the functionality of a standard SMTP server
Mailoney 256 over 1 year ago SMTP honeypot, Open Relay, Cred Harvester written in python
SendMeSpamIDS.py 12 over 6 years ago Simple SMTP fetch all IDS and analyzer
Shiva 133 8 months ago Spam Honeypot with Intelligent Virtual Analyzer

Contents / Honeypots / Shiva
Shiva The Spam Honeypot Tips And Tricks For Getting It Up And Running

Contents / Honeypots
SMTPLLMPot 5 about 1 year ago A super simple SMTP Honeypot built using GPT3.5
SpamHAT 26 over 8 years ago Spam Honeypot Tool
Spamhole
honeypot 3 almost 9 years ago The Project Honey Pot un-official PHP SDK
spamd
Cymmetria Mazerunner Leads attackers away from real targets and creates a footprint of the attack
Bluepot 245 about 4 years ago
Droidbox
Docker honeynet 22 about 10 years ago Several Honeynet tools set up for Docker containers
Dockerized Thug Dockerized to analyze malicious web content
Dockerpot 148 over 9 years ago Docker based honeypot
Manuka 24 almost 10 years ago Docker based honeypot (Dionaea and Kippo)
honey_ports 7 about 5 years ago Very simple but effective docker deployed honeypot to detect port scanning in your environment
mhn-core-docker 34 almost 3 years ago Core elements of the Modern Honey Network implemented in Docker
Quechua
Artemnesia VoIP
SentryPeer 176 about 1 month ago Protect your SIP Servers from bad actors
HoneyThing 121 almost 9 years ago TR-069 Honeypot
Kako 26 over 4 years ago Honeypots for a number of well known and deployed embedded device vulnerabilities
CanaryTokens 1,768 about 1 month ago Self-hostable honeytoken generator and reporting dashboard; demo version available at
Honeybits 273 almost 6 years ago Simple tool designed to enhance the effectiveness of your traps by spreading breadcrumbs and honeytokens across your production servers and workstations to lure the attacker toward your honeypots
Honeyλ (HoneyLambda) 511 about 6 years ago Simple, serverless application designed to create and monitor URL honeytokens, on top of AWS Lambda and Amazon API Gateway
dcept 498 over 2 years ago Tool for deploying and detecting use of Active Directory honeytokens
honeyku 60 over 5 years ago Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens)

Contents / Honeyd Tools
Honeycomb
Honeyview
Honeyd2MySQL
Honeyd-Viz
Honeydsum.pl 351 over 1 year ago

Contents / Network and Artifact Analysis
Argos Emulator for capturing zero-day attacks
COMODO automated sandbox
Cuckoo Leading open source automated malware analysis system
Pylibemu 126 about 1 year ago Libemu Cython wrapper
RFISandbox PHP 5.x script sandbox built on top of
dorothy2 197 over 1 year ago Malware/botnet analysis framework written in Ruby
imalse 13 about 11 years ago Integrated MALware Simulator and Emulator
libemu 148 10 months ago Shellcode emulation library, useful for shellcode detection
Hybrid Analysis Free malware analysis service powered by Payload Security that detects and analyzes unknown threats using a unique Hybrid Analysis technology
Joebox Cloud Analyzes the behavior of malicious files including PEs, PDFs, DOCs, PPTs, XLSs, APKs, URLs and MachOs on Windows, Android and Mac OS X for suspicious activities
VirusTotal Analyze suspicious files and URLs to detect types of malware, and automatically share them with the security community
malwr.com Free malware analysis service and community

Contents / Data Tools
DionaeaFR 66 over 7 years ago Front Web to Dionaea low-interaction honeypot
Django-kippo 12 over 12 years ago Django App for kippo SSH Honeypot
Shockpot-Frontend 3 about 9 years ago Full featured script to visualize statistics from a Shockpot honeypot
Tango 254 about 6 years ago Honeypot Intelligence with Splunk
Wordpot-Frontend 5 about 9 years ago Full featured script to visualize statistics from a Wordpot honeypot
honeyalarmg2 4 almost 8 years ago Simplified UI for showing honeypot alarms
honeypotDisplay 3 almost 9 years ago Flask website which displays data gathered from an SSH Honeypot
Acapulco 10 over 9 years ago Automated Attack Community Graph Construction
Afterglow Cloud 15 over 11 years ago
Afterglow
Glastopf Analytics 3 about 9 years ago Easy honeypot statistics
HoneyMalt 14 about 10 years ago Maltego tranforms for mapping Honeypot systems
HoneyMap 219 over 8 years ago Real-time websocket stream of GPS events on a fancy SVG world map
HoneyStats Statistical view of the recorded activity on a Honeynet
HpfeedsHoneyGraph 15 almost 12 years ago Visualization app to visualize hpfeeds logs
IVRE 3,561 about 1 month ago Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Criminalip / Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!
Kippo stats 18 over 13 years ago Mojolicious app to display statistics for your kippo SSH honeypot
Kippo-Graph Full featured script to visualize statistics from a Kippo SSH honeypot
The Intelligent HoneyNet 62 about 9 years ago Create actionable information from honeypots
ovizart 47 over 11 years ago Visual analysis for network traffic

Contents / Guides
Dionaea and EC2 in 20 Minutes Tutorial on setting up Dionaea on an EC2 instance
Using a Raspberry Pi honeypot to contribute data to DShield/ISC The Raspberry Pi based system will allow us to maintain one code base that will make it easier to collect rich logs beyond firewall logs
honeypotpi 32 4 months ago Script for turning a Raspberry Pi into a HoneyPot Pi
Honeypot research papers 30 over 6 years ago PDFs of research papers on honeypots
vEYE Behavioral footprinting for self-propagating worm detection and profiling

Backlinks from these awesome lists:

More related projects: