Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

thug

Python low-interaction honeyclient

GitHub 1014 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4139 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 45 Python

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 39.4k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

GreedyBear

Threat Intel Platform for T-POTs

GitHub 150 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

Glutton

Generic Low Interaction Honeypot

GitHub 278 Go MIT
hacktoberfest honeypot

T-Pot

The All In One Multi Honeypot Platform ๐Ÿ

GitHub 7952 C GPL-3.0
deception docker elk honeypot network-security security t-pot

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

ochi

Website GitHub 31 Go GPL-3.0
honeypot visualization

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 153 Zeek

Conpot

ICS/SCADA honeypot

GitHub 1336 Python GPL-2.0
hacktoberfest honeypot ics python scada security

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 41 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

TANNER

He who flays the hide

GitHub 227 Python GPL-3.0
honeypot security

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 874 Python MIT

dionaea

Home of the dionaea honeypot

Website GitHub 746 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 464 Python GPL-3.0
hacktoberfest honeypot security

Old Projects

WhisperPot

VoIP honeypot system

GitHub 20 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 25 Go MIT

Kippo

SSH Honeypot

GitHub 1683 Python

Droidbox

Dynamic analysis of Android apps

GitHub 774 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5701 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 94 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 841 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

github-actions published BuffaLogs 2.4.0. ๐ŸŽ‰ ยท at June 4, 2025
Lorygold pushed to certego/BuffaLogs ยท at June 4, 2025
1 commit to certego/BuffaLogs
b2c4e6a 2.4.0 (#287)
mhils pushed to mitmproxy/mitmproxy ยท at June 4, 2025
1 commit to mitmproxy/mitmproxy
5390f3e Bump mhils/workflows from b71b699e73564a34763a256b9efc8139a5d1c3fd to โ€ฆ
buffer pushed to buffer/thug ยท at June 4, 2025
1 commit to buffer/thug
84d3f1c Update requirements
injust opened a pull request in mitmproxy/mitmproxy. ยท at June 4, 2025
144 additions and 158 deletions in 8 changed files.
github-actions published GreedyBear 1.6.3. ๐ŸŽ‰ ยท at May 29, 2025
mlodic pushed to intelowlproject/GreedyBear ยท at May 29, 2025
8cf06ff Bump joblib from 1.5.0 to 1.5.1 in /requirements (#515) 4f41da2 bump 1.6.3 and removed support for ARM builds 9e0382b Merge branch 'develop' of github.com:intelowlproject/GreedyBear into develop
buffer pushed to buffer/thug ยท at May 28, 2025
2 commits to buffer/thug
4255caf Update requirements: Bump yara-python from 4.5.2 to 4.5.4 8254b70 Merge pull request #410 from buffer/dependabot/pip/yara-python-4.5.4
t3chn0m4g3 pushed to telekom-security/tpotce ยท at May 25, 2025
404ce6d Create main.yml
t3chn0m4g3 pushed to telekom-security/tpotce ยท at May 25, 2025
700100c Fix links
glaslos pushed to mushorg/glutton ยท at May 24, 2025
1 commit to mushorg/glutton
9c9d8bd bedder udp payload truncating
glaslos opened a pull request in mushorg/glutton. ยท at May 24, 2025
59 additions and 54 deletions in 9 changed files.
fgibertoni pushed to intelowlproject/IntelOwl ยท at May 22, 2025
f1a3ac5 Phunter Analyzer (#2841)
drosetti pushed to intelowlproject/IntelOwl ยท at May 20, 2025
27cb43d Frontend - Analyzables page (#2865)
tklengyel pushed to tklengyel/drakvuf ยท at May 6, 2025
1 commit to tklengyel/drakvuf
9833fa5 Fix EXITTHREAD injector method used by --exit_injection_thread (#1835)
psrok1 opened a pull request in tklengyel/drakvuf. ยท at May 5, 2025
2 additions and 4 deletions in 3 changed files.