Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

T-Pot

The All In One Multi Honeypot Platform ๐Ÿ

GitHub 9448 Shell GPL-3.0
deception docker elk honeypot network-security security t-pot

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 975 Python MIT

GreedyBear

Threat Intel Platform for T-POTs

Website GitHub 201 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4685 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 44.9k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

thug

Python low-interaction honeyclient

GitHub 1041 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

Glutton

Generic Low Interaction Honeypot

GitHub 309 Go MIT
hacktoberfest honeypot

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

Conpot

ICS/SCADA honeypot

GitHub 1520 Python GPL-2.0
hacktoberfest honeypot ics python scada security

ochi

Website GitHub 37 Go GPL-3.0
honeypot visualization

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 62 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 167 Zeek

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 65 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Old Projects

TANNER

He who flays the hide

GitHub 231 Python GPL-3.0
honeypot security

dionaea

Home of the dionaea honeypot

Website GitHub 817 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 481 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 23 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1715 Python

Droidbox

Dynamic analysis of Android apps

GitHub 805 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5965 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 96 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 852 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

eliahu-frusin opened a pull request in mitmproxy/mitmproxy. ยท at August 29, 2026
eliahu-frusin opened a pull request in mitmproxy/mitmproxy. ยท at August 29, 2026
70 additions and 0 deletions in 3 changed files.
t3chn0m4g3 pushed to telekom-security/tpotce ยท at August 29, 2026
290567a fix: update URL for mass scanner list in blackhole feature
yuanchun-li pushed to honeynet/droidbot ยท at August 29, 2026
2 commits to honeynet/droidbot
308d2da fix bug: DeviceState.get_all_children doesn't return all the โ€ฆ cc4cc93 Merge pull request #163 from zr4in/master
yuanchun-li pushed to honeynet/droidbot ยท at August 29, 2026
2 commits to honeynet/droidbot
91ecfc7 Fix Import Error for Androguard >=4 Compatibility and Update โ€ฆ cfeab3c Merge pull request #160 from ZeddYu/master
AzazelSensei opened a pull request in mushorg/conpot. ยท at August 28, 2026
11 additions and 0 deletions in 2 changed files.
AzazelSensei opened a pull request in mushorg/snare. ยท at August 28, 2026
1 additions and 1 deletions in 1 changed files.
regulartim pushed to GreedyBear-Project/GreedyBear ยท at August 28, 2026
1305422 build(deps): bump elasticsearch from 9.4.1 to 9.5.0 (#1503)
dependabot pushed to GreedyBear-Project/GreedyBear ยท at August 28, 2026
cd5a02d bump npm dependencies 9facb18 build(deps): bump library/nginx in /docker (#1516) fd2a5a6 build(deps-dev): bump coverage from 7.15.2 to 7.15.4 (#1507)
Aditya30ag opened a pull request in intelowlproject/IntelOwl. ยท at August 28, 2026
harshitnub077 opened a pull request in intelowlproject/IntelOwl. ยท at August 28, 2026
vee1e opened a pull request in certego/PcapMonkey. ยท at August 25, 2026
45 additions and 0 deletions in 1 changed files.
t3chn0m4g3 pushed to telekom-security/tpotce ยท at August 25, 2026
15 commits to telekom-security/tpotce
725122f feat(nsm): add Satori passive fingerprinting service 435bccc Merge pull request #1891 from telekom-security/master 667423b Merge pull request #1892 from telekom-security/master
Ozer0x777 opened a pull request in tklengyel/drakvuf. ยท at August 21, 2026
glaslos pushed to mushorg/glutton ยท at August 8, 2026
1 commit to mushorg/glutton
bcc1651 upgrade dependencies
glaslos opened a pull request in mushorg/glutton. ยท at August 8, 2026
23 additions and 23 deletions in 7 changed files.
Krisztian766 opened a pull request in mushorg/conpot. ยท at August 6, 2026
tklengyel pushed to tklengyel/drakvuf ยท at August 6, 2026
1 commit to tklengyel/drakvuf
da982ab fileextractor: add one more extraction case (#1871)