LAN-level socket cloak and manipulation toolkit

An awesome list of honeypot resources. With repository stars⭐ and forks🍴

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

A system to gather suspicious URLs from SSH honeynets and to semi-automatically evaluate whether they are malicious or not.

MIP - a malware investigation framework for extracting IOCs from honeypots

Jebakan is a modular honeypot system written in Python for cybersecurity research, threat intelligence gathering, and network security monitoring.

collect logs and alerts from 37 honeypots and send it to backed (eg peba, geba), hpfeeds, influxdb or jSON file.

advanced redis honeypot that captures lua scripts and downloads malicious modules from master/slave replication attempts

Honeypot generation & deployment tool

A tool to help you monitor and visualize potential intrusion attempts on your home Wi-Fi network.

Scalable integration between the T-Pot honeypot platform and the Malware Information Sharing Platform (MISP), designed to support organizations at varying levels of threat‑intelligence maturity.

🍯 Encore un autre pot de miel / 🍯 Yet Another Honeypot

SentinelPot is an interactive honeypot designed to detect unauthorized access, log attacker activities, and send real-time alerts to a Discord webhook. It provides detailed logs of potential threats while maintaining a visually appealing CLI and embed format. 🚀

Winnie is a lightweight honeypot and threat emulation platform designed to lure, capture, and analyze malicious activity in a safe, controlled environment. Ideal for cybersecurity enthusiasts, it simulates vulnerable services to expose real-world attack vectors.

Interactive, dynamic, and realistic LLM honeypots

Usernames & Passwords of SSH Intruders Transferred to Text, Integrated with AbuseIPDB.

Honey pot wallet free!

The Attacker IP Prioritizer(AIP) dynamically generates resource-friendly IPv4 blocklists from Zeek network flows.

Honeyscanner: A vulnerability analyzer for honeypots

A fork of the original mailhoney SMTP honeypot rewritten due to library deprecation