Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 46.2k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Glutton

Generic Low Interaction Honeypot

GitHub 310 Go MIT
hacktoberfest honeypot

GreedyBear

Threat Intel Platform for T-POTs

Website GitHub 208 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 9635 Shell GPL-3.0
deception docker elk honeypot network-security security t-pot

Conpot

ICS/SCADA honeypot

GitHub 1539 Python GPL-2.0
hacktoberfest honeypot ics python scada security

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4766 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

ochi

Website GitHub 39 Go GPL-3.0
honeypot visualization

thug

Python low-interaction honeyclient

GitHub 1046 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

DRAKVUF

Black-box Binary Analysis

Website GitHub 1283 C++
introspection malware-analysis virtualization xen

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 993 Python MIT

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 63 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 166 Zeek

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 66 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Old Projects

TANNER

He who flays the hide

GitHub 233 Python GPL-3.0
honeypot security

dionaea

Home of the dionaea honeypot

Website GitHub 819 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

Website GitHub 604 Python

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 486 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 23 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1716 Python

Droidbox

Dynamic analysis of Android apps

GitHub 811 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5960 JavaScript

dockpot

GitHub 51 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 97 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

GitHub 30 C

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 857 Java

HoneyBow

A high-interaction malware collection toolkit

Website

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

@eloydegen
eloydegen opened a pull request in mitmproxy/mitmproxy. · at October 23, 2026
#8511 add svg logo in black and white and add to README
37 additions and 0 deletions in 4 changed files.
@dev-aditya-hub
dev-aditya-hub opened a pull request in GreedyBear-Project/GreedyBear. · at October 23, 2026
#1786 Reject relation names in the feeds ordering parameter. Closes #1785
47 additions and 2 deletions in 3 changed files.
@Sanchit2662
Sanchit2662 opened a pull request in GreedyBear-Project/GreedyBear. · at October 23, 2026
#1784 Use the same Tor exit node label as T-Pot. Closes #1771
81 additions and 3 deletions in 6 changed files.
@bacescuandrei
bacescuandrei opened a pull request in mitmproxy/mitmproxy. · at October 23, 2026
#8510 Close the UDP socket in get_free_port when it cannot be bound
6 additions and 1 deletions in 3 changed files.
@glaslos
glaslos pushed to mushorg/glutton · at October 22, 2026
2 commits to mushorg/glutton
67ab585 imap protocol handler 1cd7a67 xiongmai banner
@glaslos
glaslos pushed to mushorg/glutton · at October 22, 2026
1 commit to mushorg/glutton
207636d rcon handler
@seiffawal
seiffawal opened a pull request in mushorg/snare. · at October 22, 2026
#341 Forward the raw POST body to TANNER as post_data_raw
97 additions and 1 deletions in 3 changed files.
@JyantiM
JyantiM opened a pull request in intelowlproject/IntelOwl. · at October 22, 2026
#4101 Add side-by-side Job comparison and difference view. Closes #4092
1339 additions and 17 deletions in 13 changed files.
@Sickwoman
Sickwoman opened a pull request in honeynet/ochi. · at October 22, 2026
#205 Match non-ASCII terms in payload contains
31 additions and 1 deletions in 2 changed files.
@Sickwoman
Sickwoman opened a pull request in honeynet/ochi. · at October 22, 2026
#204 Update the filter placeholder and give the field a label
2 additions and 1 deletions in 1 changed files.
@AkshayA55
AkshayA55 opened a pull request in telekom-security/tpotce. · at October 22, 2026
#1929 Current sensor state
1694 additions and 32 deletions in 7 changed files.
@t3chn0m4g3
t3chn0m4g3 pushed to telekom-security/tpotce · at October 21, 2026
1 commit to telekom-security/tpotce
d9d4303 fix(dionaea): the mirror service is not enabled, port 42 is …
@glaslos
glaslos pushed to mushorg/conpot · at October 20, 2026
1 commit to mushorg/conpot
dada7f2 Bump multidict from 6.9.0 to 6.9.1 (#663)
@shreyastek
shreyastek opened a pull request in tklengyel/drakvuf. · at October 19, 2026
#1886 libdrakvuf: fix use-after-free of the breakpoint list in refresh_shadow_copy
66 additions and 39 deletions in 1 changed files.
@github-actions
github-actions pushed to intelowlproject/IntelOwl · at October 19, 2026
2 commits to intelowlproject/IntelOwl
9dfdd88 fix(auth): add missing validations and rate throttling to … 6467b12 Update GoReSym from v3.4 to v3.4.1
@Jah-yee
Jah-yee opened a pull request in tillmannw/honeytrap. · at October 17, 2026
#7 fix docs: correct choicde to choice in README.md
1 additions and 1 deletions in 1 changed files.
@glaslos
glaslos pushed to mushorg/conpot · at October 12, 2026
1 commit to mushorg/conpot
839f892 fix flaky ftp test
@EEnsarA
EEnsarA opened a pull request in mushorg/snare. · at October 10, 2026
#340 Update tanner_handler.py
22 additions and 13 deletions in 1 changed files.
@buffer
buffer pushed to buffer/thug · at October 3, 2026
1 commit to buffer/thug
9970d25 Update requirements
@buffer
buffer pushed to buffer/thug · at October 3, 2026
1 commit to buffer/thug
d11f517 Update requirements