Home / Threat Defense / Honeypots

Honeypots

Discover honeypots for advanced threat defense and early detection of malicious activity.

Try these 162 AI Honeypots Tools

dirstalk
Free

dirstalk View dirstalk

HoneyDrive is the premier honeypot Linux distro with over 10 pre-installed honeypot software packages and numerous analysis tools.

Dionaea
Free

Dionaea View Dionaea

A powerful tool for finding and exploiting subdomain takeover vulnerabilities

DNS Honeypot - UDPot
Free

DNS Honeypot - UDPot View DNS Honeypot - UDPot

A honeypot system that detects and identifies attack commands, recon attempts, and download commands, mimicking a vulnerable Elasticsearch instance.

django-kippo
Free

django-kippo View django-kippo

A honeypot agent for running honeypots with service and data at threatwar.com.

Dockerpot
Free

Dockerpot View Dockerpot

ElasticSearch honeypot to capture attempts to exploit CVE-2014-3120, with logging and daemon options.

Dolos: SDN Honeypot
Free

Dolos: SDN Honeypot View Dolos: SDN Honeypot

A tutorial on setting up Dionaea on an EC2 instance in 20 minutes

dotdotpwn
Free

dotdotpwn View dotdotpwn

Modular honeypot based on Python with support for Siemens S7 protocol.

DShield Raspberry Pi Sensor
Free

DShield Raspberry Pi Sensor View DShield Raspberry Pi Sensor

SHIVA: Spam Honeypot with Intelligent Virtual Analyzer for capturing and analyzing spam data.

Drupot
Free

Drupot View Drupot

A low interaction honeypot for detecting CVE-2018-0101 vulnerability in Cisco ASA component.

Elastichoney
Free

Elastichoney View Elastichoney

Kippo is a medium interaction SSH honeypot with fake filesystem and session logging capabilities.

Endlessh
Free

Endlessh View Endlessh

Multi-honeypot platform with various honeypots and monitoring tools.

ESPot
Free

ESPot View ESPot

A honeypot installation for Drupal that supports Go modules and mimics different versions of Drupal.

Express Honeypot
Free

Express Honeypot View Express Honeypot

A tool for testing subdomain takeover possibilities at a mass scale.

ffuf
Free

ffuf View ffuf

A low-interaction honeypot that simulates network services to detect and monitor potential intrusion attempts on internal networks.

Galah
Free

Galah View Galah

A DNS server for executing DNS Rebinding attacks

GasPot
Free

GasPot View GasPot

An LLM-based honeypot file system creator that generates realistic file systems and configurations to lure attackers and improve analyst engagement.

GHH - Google Hack Honeypot
Free

GHH - Google Hack Honeypot View GHH - Google Hack Honeypot

A low-interaction SSH authentication logging honeypot that logs all authentication attempts in JSON format.

Ghost USB Honeypot
Free

Ghost USB Honeypot View Ghost USB Honeypot

A subset of the Modern Honey Network project set up to run in docker, including hpfeeds broker, cowrie honeypot, and dionaea honeypot.

Gitjacker
Free

Gitjacker View Gitjacker

A DNS server for executing DNS Rebinding attacks

Glastopf Analytics
Free

Glastopf Analytics View Glastopf Analytics

A web application honeypot sensor attracting malicious traffic from the Internet

Glastopf
Free

Glastopf View Glastopf

HoneyDrive is the premier honeypot Linux distro with over 10 pre-installed honeypot software packages and numerous analysis tools.

go-HoneyPot
Free

go-HoneyPot View go-HoneyPot

A low-interaction honeypot that logs IP addresses, usernames, and passwords used by clients connecting via SSH, primarily used for gathering intelligence on brute force attacks.

Go0r
Free

Go0r View Go0r

A tool to bypass Content Security Policy (CSP) restrictions

gohoney
Free

gohoney View gohoney

A collection of scripts for debugging SSRF, blind XSS, and XXE vulnerabilities