This post feature honeypot tools.
Honeypot Tool Repositories
You can find a list of honeypot tools at Awesome Honeypots on this external link.
List of Honeypot Tools
List of Honeypot Tools:
- KFSensor
- SPECTER
- HoneyBOT
- SNARE
- Glastopf
- Heralding (https://honeynet.org)
- DCEPT (https://github.com)
- Modern Honey Network (https://github.com)
- MongoDB-HoneyProxy (https://github.com)
- Elastichoney
- mysql-honeypotd (https://github.com)
- Super Next-generation Advanced Reactive honEypot(Snare) (https://github.com)
- labrea Tarpit
- Honeyd (http://www.honeyd.org)
- User-Mode Linux
- Sebek
- snort-inline
- The Bait and Switch Honeypot
- HoneyPy
- Honeyntp
- Ensnare
- DemonHunter
- Nova
- OpenCanary
- Kojoney2
- Cowrie
Some of the most popular are KFSensor and SPECTER.
KFSensor
SPECTER
HoneyBOT
SNARE
Super Next generation Advanced Reactive honEypot (SNARE) is a web application honeypot sensor.
It is FOSS under a GPLv3.0.
TANNER is a complement for SNARE.
TANNER is FOSS.
Glastopf
Glastopf was originally developed by Lukas Rist.
It is source-viewable under an unspecified license.
Glastopf successors are SNARE and TANNER.
Heralding
Heralding/honeynet official website
DCEPT
Modern Honey Network
MongoDB-HoneyProxy
Elastichoney
Elastichoney is an Elasticseach honeypot.
It is FOSS under a MIT license.
mysql-honeypotd
Super Next-generation Advanced Reactive honEypot(Snare)
labrea
Abandoned
labrea is an abandoned project. Its last update lasts from 2020.
It is FOSS under a GPLv2 license.
Honeyd
User-Mode Linux (UML)
User-mode linux (UML) is FOSS.
User mode linux official website
Sebek
Sebek is a data capture tool designed to capture attacker’s activities on a honeypot.
It is probably abandoned, with its last update in 2006.
snort-inline
Abandoned and removed
snort-inline is an abandoned project, and its source code and binaries are no longer available.
It was developed by William Metcalf and Victor. You may try to contact them to recover the project.
The Bait and Switch Honeypot
The Bait and Switch Honeypot
The Bait and Switch official website
HoneyPy
HoneyPy is FOSS under a GPLv2 license.
Honeyntp
honeyntp is an ntp-scan honeypot written in Python.
It is source-viewable under an unspecified license
Ensnare
Ensnare is FOSS under a BSD-2.0 license.
DemonHunter
DemonHunter is a distributed honeypot.
It is FOSS under a MIT license.
Nova
Nova is released under a GPL-v3.0 license.
OpenCanary
OpenCanary is FOSS under a BSD-3-Clause license.
Kojoney2
Cowrie
Cowrie is a SSH/Telnet honeypot.
It is released under a FOSS-like custom license.