Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 41.4k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4369 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

GreedyBear

Threat Intel Platform for T-POTs

GitHub 157 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

thug

Python low-interaction honeyclient

GitHub 1019 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 54 Python

T-Pot

The All In One Multi Honeypot Platform ๐Ÿ

GitHub 8515 C GPL-3.0
deception docker elk honeypot network-security security t-pot

ochi

Website GitHub 32 Go GPL-3.0
honeypot visualization

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

Glutton

Generic Low Interaction Honeypot

GitHub 293 Go MIT
hacktoberfest honeypot

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 159 Zeek

Conpot

ICS/SCADA honeypot

GitHub 1405 Python GPL-2.0
hacktoberfest honeypot ics python scada security

Old Projects

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 52 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

TANNER

He who flays the hide

GitHub 230 Python GPL-3.0
honeypot security

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 924 Python MIT

dionaea

Home of the dionaea honeypot

Website GitHub 782 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 474 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 20 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 29 Go MIT

Kippo

SSH Honeypot

GitHub 1707 Python

Droidbox

Dynamic analysis of Android apps

GitHub 787 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5864 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 95 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 849 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

autofix-ci pushed to mitmproxy/mitmproxy ยท at December 2, 2025
1 commit to mitmproxy/mitmproxy
069a11f [autofix.ci] apply automated fixes
dependabot pushed to mitmproxy/mitmproxy ยท at December 2, 2025
8 commits to mitmproxy/mitmproxy
b28d621 Bump the github-actions group with 6 updates (#8011) 88022bc Update wsproto requirement from <=1.2.0,>=1.0 to โ€ฆ 24476d7 Update asgiref requirement from <=3.10.0,>=3.2.10 to โ€ฆ
drosetti pushed to intelowlproject/IntelOwl ยท at December 2, 2025
2ef233e fixed tags (#3093)
carellamartina opened a pull request in intelowlproject/IntelOwl. ยท at December 2, 2025
28 additions and 7 deletions in 2 changed files.
github-actions published GreedyBear 2.1.0. ๐ŸŽ‰ ยท at December 2, 2025
regulartim pushed to intelowlproject/GreedyBear ยท at December 2, 2025
8c6112f Bump slack-sdk from 3.36.0 to 3.37.0 in /requirements (#588) feade6e Bump numpy from 2.2.4 to 2.3.3 in /requirements (#586) 9dbaf0b Bump scikit-learn from 1.6.1 to 1.7.2 in /requirements โ€ฆ
Noble-47 opened a pull request in certego/BuffaLogs. ยท at December 2, 2025
9448 additions and 4483 deletions in 211 changed files.
Lorygold pushed to certego/BuffaLogs ยท at December 1, 2025
1 commit to certego/BuffaLogs
65326e3 Implement session timeout with idle detection, warning โ€ฆ
t3chn0m4g3 pushed to telekom-security/tpotce ยท at November 27, 2025
5ac0881 Update link to Alma Linux 9.7 minimal iso
buffer pushed to buffer/thug ยท at November 26, 2025
1 commit to buffer/thug
381d8eb Update requirements
t3chn0m4g3 pushed to telekom-security/tpotce ยท at November 26, 2025
72bd918 Fix Debian and Alma links
glaslos pushed to honeynet/ochi ยท at November 23, 2025
1 commit to honeynet/ochi
4be231c Bump svelte, prettier-plugin-svelte, โ€ฆ
glaslos pushed to honeynet/ochi ยท at November 23, 2025
1 commit to honeynet/ochi
801158a remove busted test
buffer pushed to buffer/thug ยท at November 17, 2025
1 commit to buffer/thug
c1f988b Update requirements
psrok1 opened a pull request in tklengyel/drakvuf. ยท at November 3, 2025
307 additions and 24 deletions in 16 changed files.