Projects

This page contains a list of tools and services that we use on a regular basis. Most of these tools have been created by our members and GSoC students, but some are also external and not affiliated with the Honeynet Project. If you see that a specific tool is not listed, but should, feel free to email [email protected]. Projects are sorted by last commit date.

Active Projects

thug

Python low-interaction honeyclient

GitHub 1023 Python GPL-2.0

client-honeypot honeyclient low-interaction python security-tools shellcode virustotal

mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

Website GitHub 43.0k Python MIT

debugging http http2 man-in-the-middle mitmproxy proxy python security ssl tls websocket

Intel Owl

IntelOwl: manage your Threat Intelligence at scale

Website GitHub 4537 Python AGPL-3.0

cyber-security cyber-threat-intelligence cybersecurity dfir enrichment hacktoberfest honeynet incident-response intel-owl ioc malware-analysis malware-analyzer osint osint-python python

GreedyBear

Threat Intel Platform for T-POTs

GitHub 196 Python MIT

cyber-threat-intelligence cybersecurity hacktoberfest honeypot ioc open-source python threat-intelligence threatintel tpot

Conpot

ICS/SCADA honeypot

GitHub 1457 Python GPL-2.0

hacktoberfest honeypot ics python scada security

ochi

Website GitHub 36 Go GPL-3.0

honeypot visualization

BuffaLogs

an Open Source Django App whose main purpose is to detect login anomalies

GitHub 63 Python

PcapMonkey

will provide an easy way to analyze pcap using the latest version of Suricata and Zeek.

GitHub 166 Zeek

T-Pot

The All In One Multi Honeypot Platform 🐝

GitHub 9047 C GPL-3.0

deception docker elk honeypot network-security security t-pot

DRAKVUF

Black-box Binary Analysis

Website GitHub 1221 C++

introspection malware-analysis virtualization xen

honeyscanner

A vulnerability analyzer for honeypots

Website GitHub 62 Python MIT

cybersecurity cybersecurity-assessments dos-attack exploitation fuzzing honeypots passive-vulnerability-scanner ssh-honeypot vulnerability-scanner

Glutton

Generic Low Interaction Honeypot

GitHub 299 Go MIT

hacktoberfest honeypot

Old Projects

TANNER

He who flays the hide

GitHub 232 Python GPL-3.0

honeypot security

DroidBot

A lightweight test input generator for Android. Similar to Monkey, but with more intelligence and cool features!

GitHub 955 Python MIT

dionaea

Home of the dionaea honeypot

Website GitHub 796 Python GPL-2.0

dionaea honeypot security

Glastopf

Web Application Honeypot

Website GitHub 598 Python

SNARE

Super Next generation Advanced Reactive honEypot

Website GitHub 480 Python GPL-3.0

hacktoberfest honeypot security

WhisperPot

VoIP honeypot system

GitHub 22 Python MIT

honeypot voip

RIoTPot

the IoT and OT (Operational Technology) Honeypot

GitHub 30 Go MIT

Kippo

SSH Honeypot

GitHub 1712 Python

Droidbox

Dynamic analysis of Android apps

GitHub 798 Python

cuckoo

Sandbox is an automated dynamic malware analysis system

Website GitHub 5946 JavaScript

dockpot

GitHub 52 Python

Google Hack Honeypot

GitHub 7 PHP GPL-2.0

honeypot security

Honeytrap

a low-interaction honeypot

GitHub 96 C GPL-2.0

GVol

GitHub 20 Java MIT

Capture-HPC

A high interaction client honeypot

GitHub 31 C

Capture BAT

a behavioral analysis tool of applications for the Win32 operating system family.

GitHub 32 C++ GPL-2.0

honeysnap

GitHub 13 Python

honeyc

GitHub 8 Ruby

HFlow2

GitHub 5 C++ GPL-2.0

APKinspector

a powerful GUI tool for analysts to analyze the Android applications.

GitHub 854 Java

HoneyBow

A high-interaction malware collection toolkit

Website

Honeyd

A low-interaction honeypot

Honeystick

A portable honeynet demonstration and incident response tool

Latest Activity

Prasad8830 opened a pull request in GreedyBear-Project/GreedyBear. · at April 11, 2026

#1222 Migrate tor_exit_nodes HTTP client to httpx (part of #1214)

53 additions and 13 deletions in 4 changed files.

Abhishek9639 opened a pull request in intelowlproject/IntelOwl. · at April 11, 2026

#3650 fix(hudsonrock): raise exception for non-email GENERIC observables. Closes #3647

28 additions and 0 deletions in 2 changed files.

nameearly opened a pull request in mitmproxy/mitmproxy. · at April 11, 2026

#8172 correct a parameter

10 additions and 1 deletions in 3 changed files.

Nehall1 opened a pull request in intelowlproject/IntelOwl. · at April 10, 2026

#3649 maintenance(analyzers): deprecate and remove Feodo_Tracker. Closes #3540

142 additions and 205 deletions in 5 changed files.

mhils opened a pull request in mitmproxy/mitmproxy. · at April 10, 2026

#8171 SECURITY.md: Exclude DoS from scope

7 additions and 0 deletions in 1 changed files.

armoredvortex opened a pull request in GreedyBear-Project/GreedyBear. · at April 10, 2026

#1221 Bind formik values to username and password inputs in Login component. Closes #1195

2 additions and 0 deletions in 1 changed files.

glaslos pushed to mushorg/conpot · at April 9, 2026

1 commit to mushorg/conpot

3e87b35 Bump cryptography from 46.0.6 to 46.0.7 (#609)

buffer pushed to buffer/thug · at April 3, 2026

1 commit to buffer/thug

82d7b29 [Github Actions] Do not generate Docker linux/arm64 image

buffer published thug v6.21. 🎉 · at April 3, 2026

glaslos pushed to mushorg/conpot · at March 31, 2026

1 commit to mushorg/conpot

b2d5007 upgrade to python3.12 (#607)

lucaCigarini pushed to certego/BuffaLogs · at March 30, 2026

1 commit to certego/BuffaLogs

de665bb Correct way to reference the Apacne 2.0 license (#567)

pdelsante opened a pull request in certego/BuffaLogs. · at March 30, 2026

#567 Correct way to reference the Apache 2.0 license

13 additions and 3 deletions in 2 changed files.

alwaysalearner1234 opened a pull request in honeynet/honeyscanner. · at March 27, 2026

#54 Fix IPv6 handling: preserve ':' in target IP sanitization

2 additions and 2 deletions in 1 changed files.

eugenioseveri pushed to certego/PcapMonkey · at March 25, 2026

1 commit to certego/PcapMonkey

da829c6 Adding CONTRIBUTING.md and CLA (#39)

pdelsante opened a pull request in certego/PcapMonkey. · at March 20, 2026

#39 Adding CONTRIBUTING.md and CLA

53 additions and 0 deletions in 1 changed files.

glaslos pushed to honeynet/ochi · at March 19, 2026

1 commit to honeynet/ochi

6c69549 Bump google.golang.org/grpc from 1.71.0 to 1.79.3 (#131)