Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 46.8k Python MIT
debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

GreedyBear

Threat Intel Platform for T-POTs

Website GitHub 212 Python MIT
cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4813 Python AGPL-3.0
cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

Glutton

Generic Low Interaction Honeypot

GitHub 310 Go MIT
hacktoberfest honeypot

Conpot

ICS/SCADA honeypot

GitHub 1541 Python GPL-2.0
hacktoberfest honeypot ics python scada security

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 9711 Shell GPL-3.0
deception docker elk honeypot network-security security t-pot

ochi

Website GitHub 38 Go GPL-3.0
honeypot visualization

DRAKVUF

Black-box Binary Analysis

introspection malware-analysis virtualization xen

thug

Python low-interaction honeyclient

GitHub 1045 Python GPL-2.0
client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 993 Python MIT

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 62 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 165 Zeek

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 65 Python MIT
cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Old Projects

TANNER

He who flays the hide

GitHub 234 Python GPL-3.0
honeypot security

dionaea

Home of the dionaea honeypot

Website GitHub 818 Python GPL-2.0
dionaea honeypot security

Glastopf

Web Application Honeypot

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 487 Python GPL-3.0
hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 23 Python MIT
honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 31 Go MIT

Kippo

SSH Honeypot

GitHub 1716 Python

Droidbox

Dynamic analysis of Android apps

GitHub 814 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5958 JavaScript

dockpot

GitHub 51 Python

Google Hack Honeypot

Google Hack Honeypot

GitHub 7 PHP GPL-2.0
honeypot security

Honeytrap

a low-interaction honeypot

GitHub 97 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 858 Java

HoneyBow

A high-interaction malware collection toolkit

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

soujasK opened a pull request in honeynet/ochi. · at November 10, 2026
111 additions and 43 deletions in 3 changed files.
soujasK opened a pull request in honeynet/ochi. · at November 10, 2026
17 additions and 2 deletions in 3 changed files.
parth-951 opened a pull request in GreedyBear-Project/GreedyBear. · at November 10, 2026
34 additions and 3 deletions in 3 changed files.
Saurabh-1785 opened a pull request in GreedyBear-Project/GreedyBear. · at November 10, 2026
glaslos pushed to mushorg/glutton · at November 9, 2026
3 commits to mushorg/glutton
774612d Answer LibreOffice Impress Remote pairing requests 823ea8e added tls test 0c12765 Answer the Redpoint/Censys MELSEC-Q CPU-info probe (seen on …
glaslos pushed to mushorg/glutton · at November 9, 2026
2 commits to mushorg/glutton
acbd6b0 Label RDP sessions with JA4 … 62204ee Label RDP sessions with JA4 …
yldrmzffr opened a pull request in mitmproxy/mitmproxy. · at November 9, 2026
32 additions and 1 deletions in 3 changed files.
lups2000 pushed to mitmproxy/mitmproxy · at November 9, 2026
1 commit to mitmproxy/mitmproxy
80e1ef5 docs: fix links that go to a 404 on docs.mitmproxy.org …
github-actions opened a pull request in intelowlproject/IntelOwl. · at November 9, 2026
2 additions and 2 deletions in 2 changed files.
t3chn0m4g3 pushed to telekom-security/tpotce · at November 8, 2026
11 commits to telekom-security/tpotce
cb314f2 fix: clarify honeypot dashboards and confidence coverage e22d713 chore: record verified honeypot dashboard hashes e646b08 fix(iso): T-Pot boot entries, one keyboard question, VTE …
t3chn0m4g3 pushed to telekom-security/tpotce · at November 7, 2026
48 commits to telekom-security/tpotce
3885c58 refactor!: T-Pot runs on Linux only (drop macOS/Windows … a55d77c feat(iso): carry T-Pot, gum and the Manager's wheels offline 3068d3e feat(iso): start the T-Pot installer after the boot without …
FogProtocol opened a pull request in intelowlproject/IntelOwl. · at November 7, 2026
466 additions and 24 deletions in 7 changed files.
Sumit-ai-dev opened a pull request in mushorg/conpot. · at November 6, 2026
kgeil opened a pull request in mushorg/conpot. · at November 4, 2026
352 additions and 113 deletions in 8 changed files.
tklengyel pushed to tklengyel/drakvuf · at November 2, 2026
1 commit to tklengyel/drakvuf
3ce4088 libdrakvuf: stop cleanly when the guest shuts down or …
tklengyel pushed to tklengyel/drakvuf · at October 30, 2026
1 commit to tklengyel/drakvuf
3a3b69c dkommon: zero-initialize the services.exe trap array (#1897)
buffer pushed to buffer/thug · at October 25, 2026
1 commit to buffer/thug
5122baa Drop Python 3.10 support
buffer pushed to buffer/thug · at October 25, 2026
2 commits to buffer/thug
83d4796 Update requirements 8ff9a81 Merge branch 'master' of github.com:buffer/thug
zcosmicw opened a pull request in honeynet/honeyscanner. · at October 25, 2026
1 additions and 1 deletions in 1 changed files.
seiffawal opened a pull request in mushorg/snare. · at October 22, 2026
97 additions and 1 deletions in 3 changed files.