Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

Discontinued. Fork at your will.

Cowrie Docker GitHub repository

A simple log viewer for cowrie

Malware written in bash to serve as an initial dropper script that will provide a strong foothold on the target device via reverse shells and persistence techniques, can be set to run via user interaction or coupled with a bot.

Parse cowrie honeypot logs into a neo4j database

Provides at-a-glance info from the Cowrie honeypot JSON logs

Majal's server-related codes

Kubernetes for Cowrie

A script using Docker to quickly bring up some honeypots exposing lots of services. For research, reconnaissance, and fun. (DISCLAIMER may not be fun, not to be taken internally, aim away from face)

The goal of Engaged Threat is to provide honeypot researchers the ability to hold the attention of an attacker or to induce the attacker to participate in some sort of increased activity.

🛡️A machine learning-based Intrusion Detection System that uses the Cowrie honeypot to collect attack data in a Debian VMware setup. Data is stored in MongoDB and analyzed using the AdaBoost algorithm ⚙️ to detect threats. This project shows how honeypots and ML can enhance cybersecurity.

Ansible configuration for Cowrie. This is work in progress for Cowrie infrastructure

An automated honeypot network using Ansible.

The National Cyber Threat Intelligence Hub collects, processes, and visualizes cyber threat data in real time.

Multi-task NLP on Cowrie honeypot attacker-session logs—classification, QA, summarization & remediation; Flask/Django integration.

deception & honeypot in high interaction honeypot. grading: 90%

Built and deployed a simulated enterprise network for threat hunting analysis and network monitoring utilising pfSense, Suricata, Cowrie, Wazuh, and Kali Linux.

Multi-honeypot deployment platform with centralized logging - Deploy Cowrie SSH, Elasticpot, and Redis honeypots on Kubernetes with Elastic Stack monitoring

Hands-on Cowrie SSH honeypot project capturing attacker behavior and SSH intrusion attempts. Built for learning threat detection, logging, and security analytics.