Dionaea – Catching bugs

Dionaea is a low-interaction honeypot that captures attack payloads and malware. Dionaea is meant to be a nepenthes successor, embedding python as scripting language, using libemu to detect shellcodes, supporting ipv6 and tls.

Download


There are some forks available on Github:

Protocols


  • blackhole
  • epmap
  • ftp
  • http
  • memcache
  • mirror
  • mqtt
  • mssql
  • mysql
  • pptp
  • sip
  • smb
  • tftp
  • upnp

Logging


  • fail2ban
  • hpfeeds
  • log_json
  • log_sqlit

Documentation


 Licenses


  • dionaea: GPLv2+
  • pyev(modules/python/pyev): GPLv3+
  • tftp service(modules/python/tftp.py): CNRI Python License (incompatible with GPL)
  • parts of ftp service(modules/python/ftp.py): MIT (compatible with GPL)