Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4515 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 165 Zeek

GreedyBear

Threat Intel Platform for T-POTs

GitHub 188 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 42.8k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

thug

Python low-interaction honeyclient

GitHub 1021 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 64 Python

ochi

Website GitHub 36 Go GPL-3.0
honeypot visualization

T-Pot

The All In One Multi Honeypot Platform ๐Ÿ

GitHub 8911 C GPL-3.0
deception docker elk honeypot network-security security t-pot

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 62 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Glutton

Generic Low Interaction Honeypot

GitHub 299 Go MIT
hacktoberfest honeypot

Old Projects

Conpot

ICS/SCADA honeypot

GitHub 1446 Python GPL-2.0
hacktoberfest honeypot ics python scada security

TANNER

He who flays the hide

GitHub 232 Python GPL-3.0
honeypot security

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 949 Python MIT

dionaea

Home of the dionaea honeypot

Website GitHub 795 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 479 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 22 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1712 Python

Droidbox

Dynamic analysis of Android apps

GitHub 796 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5934 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 95 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 853 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

mlodic pushed to intelowlproject/IntelOwl ยท at March 25, 2026
2bdc69f fix(#2828): remove Dehashed analyzer (paid API key required, โ€ฆ
ManaswibRane opened a pull request in intelowlproject/IntelOwl. ยท at March 25, 2026
35 additions and 0 deletions in 1 changed files.
eugenioseveri pushed to certego/PcapMonkey ยท at March 25, 2026
1 commit to certego/PcapMonkey
da829c6 Adding CONTRIBUTING.md and CLA (#39)
regulartim pushed to intelowlproject/GreedyBear ยท at March 25, 2026
43be36e build(deps-dev): bump @vitejs/plugin-react in /frontend โ€ฆ
dependabot pushed to intelowlproject/GreedyBear ยท at March 25, 2026
a323012 build(deps-dev): bump stylelint from 17.4.0 to 17.5.0 in โ€ฆ 2f9a8c3 build(deps-dev): bump @vitejs/plugin-react in /frontend
Krishnachaitanyakc opened a pull request in mitmproxy/mitmproxy. ยท at March 25, 2026
128 additions and 15 deletions in 2 changed files.
mhils pushed to mitmproxy/mitmproxy ยท at March 24, 2026
1 commit to mitmproxy/mitmproxy
5a4a128 fix: skip inject_event when inject flow type is wrong โ€ฆ
buffer published thug v6.20. ๐ŸŽ‰ ยท at March 22, 2026
buffer pushed to buffer/thug ยท at March 22, 2026
1 commit to buffer/thug
d8aa313 Version 6.20
pdelsante opened a pull request in certego/PcapMonkey. ยท at March 20, 2026
53 additions and 0 deletions in 1 changed files.
pdelsante opened a pull request in certego/BuffaLogs. ยท at March 20, 2026
49 additions and 0 deletions in 1 changed files.
glaslos pushed to honeynet/ochi ยท at March 19, 2026
1 commit to honeynet/ochi
6c69549 Bump google.golang.org/grpc from 1.71.0 to 1.79.3 (#131)
t3chn0m4g3 pushed to telekom-security/tpotce ยท at March 14, 2026
e7b42bd Fix conditional check in uninstall.sh using assignment โ€ฆ
am-periphery opened a pull request in telekom-security/tpotce. ยท at March 14, 2026
1 additions and 1 deletions in 1 changed files.
psolvx opened a pull request in tklengyel/drakvuf. ยท at March 12, 2026
190 additions and 48 deletions in 15 changed files.
tklengyel pushed to tklengyel/drakvuf ยท at March 5, 2026
1 commit to tklengyel/drakvuf
cb62139 Update etwmon to support Windows 11 (#1867)
lucaCigarini pushed to certego/BuffaLogs ยท at February 25, 2026
1 commit to certego/BuffaLogs
65ae3c3 fix: setup_config accepts multiple values for list fields โ€ฆ