Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

Glutton

Generic Low Interaction Honeypot

GitHub 311 Go MIT

hacktoberfest honeypot

GreedyBear

Threat Intel Platform for T-POTs

Website GitHub 212 Python MIT

cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

DRAKVUF

Black-box Binary Analysis

Website GitHub 1288 C++

introspection malware-analysis virtualization xen

ochi

Website GitHub 40 Go GPL-3.0

honeypot visualization

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 46.5k Python MIT

debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4771 Python AGPL-3.0

cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

Conpot

ICS/SCADA honeypot

GitHub 1539 Python GPL-2.0

hacktoberfest honeypot ics python scada security

thug

Python low-interaction honeyclient

GitHub 1046 Python GPL-2.0

client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 9662 Shell GPL-3.0

deception docker elk honeypot network-security security t-pot

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 994 Python MIT

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 63 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 166 Zeek

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 66 Python MIT

cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Old Projects

TANNER

He who flays the hide

GitHub 233 Python GPL-3.0

honeypot security

dionaea

Home of the dionaea honeypot

Website GitHub 819 Python GPL-2.0

dionaea honeypot security

Glastopf

Web Application Honeypot

Website GitHub 602 Python

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 486 Python GPL-3.0

hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 23 Python MIT

honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1715 Python

Droidbox

Dynamic analysis of Android apps

GitHub 811 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5960 JavaScript

dockpot

GitHub 51 Python

Google Hack Honeypot

GitHub 7 PHP GPL-2.0

honeypot security

Honeytrap

a low-interaction honeypot

GitHub 97 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

GitHub 30 C

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 858 Java

HoneyBow

A high-interaction malware collection toolkit

Website

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

dev-aditya-hub opened a pull request in GreedyBear-Project/GreedyBear. · at October 29, 2026

#1811 Document that include_similar is not bounded by the date window. Closes #1729

81 additions and 4 deletions in 2 changed files.

Ozer0x777 opened a pull request in tklengyel/drakvuf. · at October 29, 2026

#1897 dkommon: zero-initialize the services.exe trap array

1 additions and 1 deletions in 1 changed files.

nabilhaloom opened a pull request in mitmproxy/mitmproxy. · at October 29, 2026

#8545 Fix #8056: Intercept option from CLI does not works.

86 additions and 0 deletions in 2 changed files.

voidstackloop opened a pull request in mitmproxy/mitmproxy. · at October 29, 2026

#8544 feat: introduce specific process exit codes for error conditions

148 additions and 25 deletions in 14 changed files.

ABHIGYA0205 opened a pull request in GreedyBear-Project/GreedyBear. · at October 29, 2026

#1810 Scope feed share tokens to their owners. Closes #1806

73 additions and 5 deletions in 4 changed files.

frangelbarrera opened a pull request in mushorg/conpot. · at October 29, 2026

#669 Add timeout for incoming TLS handshakes

51 additions and 2 deletions in 2 changed files.

Ozer0x777 opened a pull request in tklengyel/drakvuf. · at October 29, 2026

#1896 libdrakvuf: fail drakvuf_init() when the guest OS cannot be initialized

10 additions and 2 deletions in 1 changed files.

kage-zero opened a pull request in honeynet/ochi. · at October 28, 2026

#235 docs: modernize README with visual overview and structured documentation

267 additions and 52 deletions in 4 changed files.

glaslos pushed to honeynet/ochi · at October 27, 2026

1 commit to honeynet/ochi

4dfc371 fix(ui): confirm before bulk deleting events in EventList …

sam9777-p opened a pull request in intelowlproject/IntelOwl. · at October 27, 2026

#4118 fix(frontend): escape dots in IPv4 regex. Closes #4109Fix ip regex 4109

16 additions and 14 deletions in 2 changed files.

glaslos pushed to mushorg/glutton · at October 26, 2026

1 commit to mushorg/glutton

296910f sip tool fingerprint

glaslos pushed to mushorg/glutton · at October 26, 2026

1 commit to mushorg/glutton

cfdae17 improve tunnel cpu usage

glaslos pushed to mushorg/conpot · at October 26, 2026

1 commit to mushorg/conpot

ab2395c Update black required-version to 26.10.1

pchukwuemeka424 opened a pull request in intelowlproject/IntelOwl. · at October 26, 2026

#4110 fix(frontend): require dots between IPv4 octets. Closes #4109

16 additions and 3 deletions in 3 changed files.

buffer pushed to buffer/thug · at October 25, 2026

1 commit to buffer/thug

5122baa Drop Python 3.10 support

buffer pushed to buffer/thug · at October 25, 2026

2 commits to buffer/thug

83d4796 Update requirements 8ff9a81 Merge branch 'master' of github.com:buffer/thug

zcosmicw opened a pull request in honeynet/honeyscanner. · at October 25, 2026

#57 docs: fix cd path in installation instructions

1 additions and 1 deletions in 1 changed files.

seiffawal opened a pull request in mushorg/snare. · at October 22, 2026

#341 Forward the raw POST body to TANNER as post_data_raw

97 additions and 1 deletions in 3 changed files.

AkshayA55 opened a pull request in telekom-security/tpotce. · at October 22, 2026

#1929 Current sensor state

1694 additions and 32 deletions in 7 changed files.

t3chn0m4g3 pushed to telekom-security/tpotce · at October 21, 2026

1 commit to telekom-security/tpotce

d9d4303 fix(dionaea): the mirror service is not enabled, port 42 is …