Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

GreedyBear

Threat Intel Platform for T-POTs

Website GitHub 204 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4736 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 9560 Shell GPL-3.0
deception docker elk honeypot network-security security t-pot

Glutton

Generic Low Interaction Honeypot

GitHub 310 Go MIT
hacktoberfest honeypot

ochi

Website GitHub 38 Go GPL-3.0
honeypot visualization

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 45.3k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

thug

Python low-interaction honeyclient

GitHub 1045 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

Conpot

ICS/SCADA honeypot

GitHub 1532 Python GPL-2.0
hacktoberfest honeypot ics python scada security

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 987 Python MIT

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 63 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 166 Zeek

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 66 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Old Projects

TANNER

He who flays the hide

GitHub 232 Python GPL-3.0
honeypot security

dionaea

Home of the dionaea honeypot

Website GitHub 819 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 484 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 23 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1714 Python

Droidbox

Dynamic analysis of Android apps

GitHub 810 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5959 JavaScript

dockpot

GitHub 51 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 97 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 853 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

regulartim opened a pull request in GreedyBear-Project/GreedyBear. · at October 5, 2026
0 additions and 30 deletions in 2 changed files.
AdeshDeshmukh opened a pull request in GreedyBear-Project/GreedyBear. · at October 5, 2026
33 additions and 3 deletions in 2 changed files.
github-actions opened a pull request in intelowlproject/IntelOwl. · at October 5, 2026
2 additions and 2 deletions in 2 changed files.
OsirisTechnicalInstitute opened a pull request in intelowlproject/IntelOwl. · at October 5, 2026
319 additions and 0 deletions in 3 changed files.
t3chn0m4g3 pushed to telekom-security/tpotce · at October 4, 2026
17 commits to telekom-security/tpotce
53f3d98 chore: drop Satori leftovers, it never shipped in a release 4a8092d feat(heralding): integrate 2.0 on free profile ports 8113dbc fix(heralding): pin bounded hpfeeds client implementation
glaslos pushed to mushorg/glutton · at October 4, 2026
3 commits to mushorg/glutton
ab17938 simple Kerberos parser 0011945 CoAP and mqtt handlers from RiotPot 2a6322a modbus one library
jpcaruana opened a pull request in mitmproxy/mitmproxy. · at October 4, 2026
8 additions and 5 deletions in 3 changed files.
WarpFoxHub opened a pull request in mitmproxy/mitmproxy. · at October 4, 2026
8 additions and 0 deletions in 3 changed files.
glaslos pushed to mushorg/glutton · at October 3, 2026
1 commit to mushorg/glutton
a33b60d tcp handler event order fix
buffer pushed to buffer/thug · at October 3, 2026
1 commit to buffer/thug
9970d25 Update requirements
buffer pushed to buffer/thug · at October 3, 2026
1 commit to buffer/thug
d11f517 Update requirements
glaslos pushed to honeynet/ochi · at October 3, 2026
1 commit to honeynet/ochi
dc5265d svelte version bump
glaslos pushed to honeynet/ochi · at October 3, 2026
1 commit to honeynet/ochi
bf4ba18 Bump js-yaml from 3.14.2 to 3.15.2 (#152)
t3chn0m4g3 pushed to telekom-security/tpotce · at October 1, 2026
ddc6037 fix: update Conpot to 1.0.0 and apply upstream fixes to …
glaslos pushed to mushorg/conpot · at October 1, 2026
1 commit to mushorg/conpot
6371afc fix: iccp handler crash on malformed TPKT or COTP CR (#660)
glaslos pushed to mushorg/conpot · at October 1, 2026
1 commit to mushorg/conpot
dcf064b fix: kamstrup handlers on binary input (#659)
tklengyel pushed to tklengyel/drakvuf · at September 30, 2026
1 commit to tklengyel/drakvuf
b2f64d8 libusermode: retry the ntdll.dll VAD lookup a bounded number …
tklengyel pushed to tklengyel/drakvuf · at September 30, 2026
1 commit to tklengyel/drakvuf
1644a67 hidevm: Windows 11 support for …
Divyansh2602 opened a pull request in honeynet/honeyscanner. · at September 18, 2026
179 additions and 34 deletions in 5 changed files.