paralax / awesome-honeypots

an awesome list of honeypot resources

Hi there 👋

awesome-honeypots's Issues

grab descriptions when possible

idea - a one sentence description of everything after the link

i've started working on a piece of python to get the description from github when possible, but that's not everything. plus it doesn't work right.

https://gist.github.com/paralax/4735f7aa876d58add3c4

Kippo-Malware seemingly redirecting strangley.

Whenever i open the link for Kippo it just redirects a ton to sketchy websites. I would recommend looking into it.

HoneyProxy link is dead

HoneyProxy (http://honeyproxy.org/) url does not resolve anymore.

Looks like it was merged https://github.com/mhils/HoneyProxy

This project is now part of @mitmproxy

Honeydet

Add this https://github.com/referefref/honeydet

Does any one have SWIFT based honeypots or banking system honeypots?

Hi Team,

Wondering if anyone has SWIFT based or NEFT/RTGS/Core banking, like honeypots?

Modules suggestion

https://www.criminalip.io/ - Criminal IP is a specialized Cyber Threat Intelligence (CTI) search engine that allows users to search for various security-related information such as malicious IP addresses, domains, banners, etc. It can be widely integrated

At a minimum, add `awesome` and `awesome-list` as GitHub repository topics for awesome-list style guide conformance.

Newer versions of the awesome-list conformance guide require the addition of the awesome and awesome-list GitHub repository topics to be considered for inclusion to the canonical Awesome list directory.

It is recommended to add other relevant topics as well, but these two will do at a minimum.

missed a wireless honeypot concept

https://github.com/lonegray/romanhunter

HoneyPots

Delilah honeypot link not working

Hey folks,
I was wondering if anyone knew what happened to the Delilah honeypot?
The link in the list is not working anymore and a quick google search did not give me any useful hints as to where it has moved.

organize

the CSV import was scattered. needs some better organization into lists and sublists

broken link

Link http://www.securityprofiling.com/honeyd/honeyd.shtml is broken.

Commercial honeypots: Which one do exist?

Hello everyone,

do any commercial honeypot systems exist at all? If so, which one?

Greetings you you all and stay safe!

Edit: The buzzword is deception technology as I found out ...

Bukkit Honeypot not a honeypot (computing)

Hi, nice list you made

I think Bukkit Honeypot is related to a honey block creation plugin, not honeypot in the computing sens.

Sebek outdated

I think that the Sebek project is a little bit outdated

and the links are dead apparently..

use this link if you want to download it anyway : http://old.honeynet.org/tools/sebek/

Validate pull requests with Travis

Hello, I wrote a tool that can validate README links (valid URLs, not duplicate). It can be run when someone submits a pull request.

It is currently being used by

• https://github.com/vsouza/awesome-ios
• https://github.com/matteocrippa/awesome-swift
• https://github.com/dkhamsing/open-source-ios-apps

Examples

• https://travis-ci.org/matteocrippa/awesome-swift/builds/96526196 ok ✅
• https://travis-ci.org/matteocrippa/awesome-swift/builds/96722421 link redirected / rename 🔴
• https://travis-ci.org/dkhamsing/open-source-ios-apps/builds/96763135 bad link / project deleted 🔴
• https://travis-ci.org/dkhamsing/open-source-ios-apps/builds/95754715 dupe 🔴

If you are interested, connect this repo to https://travis-ci.org/ and add a .travis.yml file to the project.

See https://github.com/dkhamsing/awesome_bot for options, more information
Feel free to leave a comment 😄

Add masscanned

Hi there,

[I am the author of IVRE and a contributor to masscanned]

I think masscanned could have its place here!

It is a low-interaction honeypot dedicated to scanners observation. It is similar to Masscan in that it has a userland, minimalist network stack. If Masscan is a client, masscanned is a server.

Even though masscanned can be used on its own, it can also be used together with IVRE to build a self-hosted alternative to services such as Greynoise, so maybe IVRE could be listed in the "Data Tools" section.

All the best,

Pierre

add tpotce

T-Pot - The All In One Honeypot Platform
https://github.com/telekom-security/tpotce

big list of honeypots to add

review https://hub.docker.com/r/dtagdevsec/conpot/ and update the site here with them as needed