Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 45 Python

thug

Python low-interaction honeyclient

GitHub 1010 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 38.9k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4108 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

GreedyBear

Threat Intel Platform for T-POTs

GitHub 145 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

ochi

Website GitHub 30 Go GPL-3.0
honeypot visualization

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 7752 C GPL-3.0
deception docker elk honeypot network-security security t-pot

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 153 Zeek

Glutton

Generic Low Interaction Honeypot

GitHub 274 Go MIT
hacktoberfest honeypot

Conpot

ICS/SCADA honeypot

GitHub 1318 Python GPL-2.0
hacktoberfest honeypot ics python scada security

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 38 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

TANNER

He who flays the hide

GitHub 226 Python GPL-3.0
honeypot security

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 862 Python MIT

dionaea

Home of the dionaea honeypot

Website GitHub 739 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 462 Python GPL-3.0
hacktoberfest honeypot security

Old Projects

WhisperPot

VoIP honeypot system

GitHub 19 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 23 Go MIT

Kippo

SSH Honeypot

GitHub 1676 Python

Droidbox

Dynamic analysis of Android apps

GitHub 772 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5666 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 94 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 840 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

AnshSinghal opened a pull request in intelowlproject/IntelOwl. · at April 23, 2025
368 additions and 1 deletions in 9 changed files.
mhils pushed to mitmproxy/mitmproxy · at April 23, 2025
1 commit to mitmproxy/mitmproxy
b089c5f fix #7452 (#7666)
mhils pushed to mitmproxy/mitmproxy · at April 23, 2025
1 commit to mitmproxy/mitmproxy
d0ee0ed contentviews: docs++ (#7667)
Lorygold pushed to certego/BuffaLogs · at April 23, 2025
1 commit to certego/BuffaLogs
67a79f3 Add risk score increment filter (#254)
Noble-47 opened a pull request in certego/BuffaLogs. · at April 22, 2025
71 additions and 52 deletions in 7 changed files.
drosetti pushed to intelowlproject/IntelOwl · at April 22, 2025
ae4e4e4 fix reset page (#2836)
tklengyel pushed to tklengyel/drakvuf · at April 19, 2025
1 commit to tklengyel/drakvuf
f46a733 win_get_object_type_index fix - it returned false for Windows version != 10 even …
glaslos pushed to honeynet/ochi · at April 17, 2025
1 commit to honeynet/ochi
0b9e962 Bump golang.org/x/net from 0.37.0 to 0.38.0 (#117)
grzetzp opened a pull request in tklengyel/drakvuf. · at April 15, 2025
0 additions and 4 deletions in 1 changed files.
buffer pushed to buffer/thug · at April 12, 2025
2 commits to buffer/thug
c8a6bdd Update requirements: Bump pymongo from 4.11.3 to 4.12.0 c0357cf Merge pull request #402 from buffer/dependabot/pip/pymongo-4.12.0
regulartim opened a pull request in intelowlproject/GreedyBear. · at April 9, 2025
64 additions and 18 deletions in 8 changed files.
regulartim opened a pull request in intelowlproject/GreedyBear. · at April 9, 2025
1 additions and 1 deletions in 1 changed files.
buffer pushed to buffer/thug · at April 8, 2025
2 commits to buffer/thug
d7e345e Update requirements: Bump lxml from 5.3.1 to 5.3.2 72b0d9c Merge pull request #401 from buffer/dependabot/pip/lxml-5.3.2
ashblend17 opened a pull request in mushorg/glutton. · at March 29, 2025
1 additions and 1 deletions in 1 changed files.
eugenioseveri pushed to certego/PcapMonkey · at March 27, 2025
1 commit to certego/PcapMonkey
5e631f2 Updated containers in docker-compose files