amun

Amun Amun was the first python-based low-interaction honeypot, following the concepts of Nepenthes but extending it with more sophisticated emulation and easier maintenance. Requirements Pyhon = 2.6 no Python3 support yet optional Python Psyco available at http://psyco.sourceforge.net/ optional...

wetland

Wetland Wetland is a high interaction SSH honeypot，designed to log brute force attacks.What's more, wetland will log shell、scp、sftp、exec-command、direct-forward、reverse-forward interation performded by the attacker. Wetland is based on python ssh module paramiko. And wetland runs as a...

fatt

66 61 74 74 2e fingerprint all the things! More info about the fingerprinting methods, sample use-cases and research results will be added to the repo soon. Stay tuned! A script for extracting network metadata and fingerprints such as JA3 and HASSH from packet capture files pcap or live network...

HosTaGe

HosTaGe - Honeypot-To-Go Copyright C 2013-2021, Aalborg University Denmark and Technische Universität Darmstadt Germany HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

ShonyDanza

ShonyDanza A customizable, easy-to-navigate tool for researching, pen testing, and defending with the power of Shodan. With ShonyDanza, you can: Obtain IPs based on search criteria Automatically exclude honeypots from the results based on your pre-configured thresholds Pre-configure all IP search...

telnet-iot-honeypot

Disclaimer This project neither supported or in development anymore. It is based on python2 which has reached its EOL in 2020 and uses dependencies which are getting harder to install over time. Use at your own risk! Telnet IoT honeypot 'Python telnet honeypot for catching botnet binaries' This...

HFish

HFish design concept HFish is a community free honeypot that focuses on enterprise security scenarios. It provides users with independently operable and practical functions from three scenarios: intranet loss detection, internet threat awareness, and threat intelligence production. It increases...

hontel

HonTel HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu/Debian environment, though it could be easily adapted to run inside any Linux environment...

PhantomFS

Fake Files. Real Security. Virtual honeypot file system for Windows — lure attackers into a directory that looks real, then catch them in the act. What Is PhantomFS? PhantomFS uses the Windows Projected File System ProjFS to surface a virtual directory full of convincing decoy files — financial...

kippo

NOTE: For more recent development, check out Michel Oosterhof's fork Kippo Kippo is a medium interaction SSH honeypot designed to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker. Kippo is inspired, but not based on Kojoney. Demo Some interesti...

kippo

NOTA: Para desarrollos más recientes, consulte el fork de Michel Oosterhof Kippo Kippo es un honeypot SSH de interacción media diseñado para registrar ataques de fuerza bruta y, lo más importante, toda la interacción de shell realizada por el atacante. Kippo está inspirado, pero no basado, en...

wirespy

wirespy WireSpy enables the automation of various WiFi attacks to conduct Man-In-The-Middle-Attacks MITMAs. WireSpy allows attackers to set up quick honeypots to carry out MITMAs. Monitoring and logging functionality is implemented in order to keep records of the victims' traffic/activities. Othe...

DShield-SIEM

DShield Sensor Log Collection with Elasticsearch Introduction This is fork and a significant update from the initial publication on the ISC Storm Center website by Scott Jensen as a BACS paper and the scripts published in Github. https://github.com/fkadriver/Dshield-ELK...

mimicry

Mimicry Mimicry Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation. Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception...

mimicry

Mimicry Mimicry Mimicry es una herramienta de seguridad desarrollada por Chaitin Technology para el engaño activo en explotación y post-explotación. El engaño activo puede migrar en vivo al atacante al honeypot sin que este se dé cuenta. Podemos alcanzar un mayor nivel de seguridad a un menor cos...

thelightscope

LightScope See Your Scanners LightScope is a lightweight, open-source network security monitor that transforms closed ports into honeypots. See who's scanning your systems without dedicated infrastructure. Provided by USC Information Sciences Institute. What It Does Monitors closed ports for...

CVE-2019-19781_IOCs

CVE-2019-19781IOCs IOCs para CVE-2019-19781 citrixhoneypotnslookup.txt contiene los resultados whois de las direcciones IP enumeradas en ips.txt. estas fueron las direcciones que aparecieron con mayor frecuencia en los registros del honeypot discutido aquí:...

Honeypot-Project

OWASP Honeypot-Project The goal of the OWASP Honeypot Project is to identify emerging attacks against web applications and report them to the community, in order to facilitate protection against such targeted attacks. Based around the earlier OWASP/WASC Distributed Web Honeypots Project...

chameleon

19 honeypots personalizables para monitorear tráfico de red, actividades de bots y credenciales de usuario\contraseña DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic y ldap Si deseas implementar los honeypots en tu proyect...