Sign in Book a Demo

gohoney

Threat Defense Honeypots

Pricing: Free

Visit Website ↗

gohoney

What is gohoney

A collection of scripts for debugging SSRF, blind XSS, and XXE vulnerabilities

This SSH Daemon Accepts Any Username, Password, or Key

This SSH daemon will accept any username, password, or key for authentication.

It only permits 'session' channels...

It only permits 'session' channels (this does not include port forwards or SFTP connections).

It will present a fake shell...

It will create a fake shell and log any commands that users try to execute, along with the corresponding date and their IP address.

Session Logging Location

All sessions will be logged to the following file: /var/log/gohoney/gohoney-yyyymmdd.log Build & Run To get started, first download and install Go. If you are using OSX, you can do this easily with the following command: $ brew install go

For Additional Information on Linux, Windows, and FreeBSD, Visit

http://golang.org

Now, Let's Build It!

Now, let's build it! # Clone this repository $ git clone https://github.com/PaulMaddox/gohoney.git # Retrieve all Go module dependencies $ cd gohoney $ go get ./... # Compile the project! $ go build main.go Usage Usage: ./gohoney -b <bind address> -p <port>

gohoney Reviews

No reviews yet.

Similar Tools

Paid
Honeypots

Tracebit

Tracebit automatically deploys security canaries across your cloud accounts, endpoints, SaaS applications, and CI/CD pipelines at scale. When attackers touch them, you know immediately.

Free
Honeypots

Snare

Snare is a robust suite of event monitoring and analysis tools engineered to satisfy stringent auditing and security mandates. It excels at collecting, filtering, and analyzing IT event data, providing essential capabilities for real-time security monitoring, deep-dive analysis, comprehensive auditing, and secure archiving. By delivering actionable insights from your IT infrastructure's events, Snare empowers organizations to proactively identify and mitigate threats, ensure compliance, and maintain a secure operational posture.

Comprehensive IT event collection and filteringReal-time security monitoring and threat detectionIn-depth event analysis for forensic investigations
Free
Honeypots

KFSensor

KFSensor is an intelligent honeypot system engineered for robust intrusion and insider threat detection within Windows environments. It proactively lures and identifies malicious actors by emulating vulnerable system services and trojans, effectively acting as a decoy. Pre-configured to monitor all TCP, UDP, and ICMP traffic, KFSensor provides immediate post-installation network visibility and offers easy customization for simulating additional bespoke services.

Advanced honeypot for intrusion and insider threat detectionSimulates vulnerable services and trojans to attract attackersMonitors all TCP, UDP, and ICMP ports
Free
Honeypots

xss2png

Helix is a versatile honeypot designed to mimic the behavior of various protocols including Kubernetes API server, HTTP, TCP, and UDP.

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

Start Your 7-Day Free Trial Book a Live Demo

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by