Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

GreedyBear

Threat Intel Platform for T-POTs

Website GitHub 203 Python MIT

cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 9527 Shell GPL-3.0

deception docker elk honeypot network-security security t-pot

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4729 Python AGPL-3.0

cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

Conpot

ICS/SCADA honeypot

GitHub 1529 Python GPL-2.0

hacktoberfest honeypot ics python scada security

DRAKVUF

Black-box Binary Analysis

Website GitHub 1276 C++

introspection malware-analysis virtualization xen

ochi

Website GitHub 38 Go GPL-3.0

honeypot visualization

thug

Python low-interaction honeyclient

GitHub 1044 Python GPL-2.0

client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 45.2k Python MIT

debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Glutton

Generic Low Interaction Honeypot

GitHub 311 Go MIT

hacktoberfest honeypot

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 982 Python MIT

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 63 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 166 Zeek

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 66 Python MIT

cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Old Projects

TANNER

He who flays the hide

GitHub 232 Python GPL-3.0

honeypot security

dionaea

Home of the dionaea honeypot

Website GitHub 819 Python GPL-2.0

dionaea honeypot security

Glastopf

Web Application Honeypot

Website GitHub 603 Python

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 485 Python GPL-3.0

hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 23 Python MIT

honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1714 Python

Droidbox

Dynamic analysis of Android apps

GitHub 806 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5959 JavaScript

dockpot

GitHub 51 Python

Google Hack Honeypot

GitHub 7 PHP GPL-2.0

honeypot security

Honeytrap

a low-interaction honeypot

GitHub 97 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

GitHub 30 C

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 852 Java

HoneyBow

A high-interaction malware collection toolkit

Website

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

AnshSinghal opened a pull request in intelowlproject/IntelOwl. · at September 25, 2026

#4037 Add Presend Address Risk analyzer. Closes #4014

201 additions and 0 deletions in 3 changed files.

Ozer0x777 opened a pull request in tklengyel/drakvuf. · at September 25, 2026

#1877 repl: find libdrakvuf.py in the meson build layout and stop leaving the domain paused

48 additions and 9 deletions in 3 changed files.

shariqueahmad108-ship-it opened a pull request in intelowlproject/IntelOwl. · at September 25, 2026

#4036 fix(deps): pin django-ipware to 7.0.1 so the image stays on Django 4.2. Closes #4034

2 additions and 0 deletions in 1 changed files.

dev-aditya-hub opened a pull request in GreedyBear-Project/GreedyBear. · at September 25, 2026

#1638 Widen `Credential.protocol` to match the event fields. Closes #1636

91 additions and 1 deletions in 3 changed files.

Ozer0x777 opened a pull request in tklengyel/drakvuf. · at September 25, 2026

#1876 userhook: add --userhook-target-process to restrict hooking to a process tree

89 additions and 0 deletions in 6 changed files.

t3chn0m4g3 pushed to telekom-security/tpotce · at September 24, 2026

3 commits to telekom-security/tpotce

5d95017 feat: send listbot user agent and T-Pot UUID when fetching … 4136c29 Merge dev-24.04.2 into … 62a538a sync with master: listbot user agent and T-Pot UUID

t3chn0m4g3 pushed to telekom-security/tpotce · at September 24, 2026

1 commit to telekom-security/tpotce

5d95017 feat: send listbot user agent and T-Pot UUID when fetching …

dependabot pushed to GreedyBear-Project/GreedyBear · at September 24, 2026

27 commits to GreedyBear-Project/GreedyBear

0d59fac fix: normalize SHA256 case in payload API lookups. Closes … 8d7472b fix(cronjobs): keep metadata for payloads skipped at … 0daa060 Update README (#1567)