Framework or guide—
Material reviewed: Repository documentationA set of Ansible playbooks to deploy and configure several existing honeypot servers (Cowrie, Mailoney, Wordpot, UDPot, iplog) alongside an open-relay Postfix mail server.
NetworkApplicationHoneypot
Open software—
Material reviewed: Repository documentationNGINX configuration that detects requests to bait paths and exploit probes and returns 410; optional IP blocking is documented.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationA web backend (Tornado+Vue+Mysql+APScheduler+Nginx+Supervisor) providing a dashboard, host status, attack list, filter lists, and mail configuration to visualize and manage events detected by the OpenCanary honeypot.
NetworkApplicationHoneypot
Open software—
Material reviewed: Repository documentationPHP (Zend/Laminas) module providing a contact form with anti-spam protection using a hidden honeypot field.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationOpen-source Python software designed for creating honeypot and honeynet setups in an easy and secure way, compatible with Python 3.x and tested on Mac OS X and Linux, with example modules for FTP, HTTP, and SSH deployed via containers.
NetworkApplicationHoneypot
Open software—
Material reviewed: Repository documentationAPI honeypot whose server, according to the documentation, logs attempts to the API.log file.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationTool shown running against a sample malicious page or URL, with shellcode and heap-spray alerts in the example output. The README does not identify it as a honeypot.
Application
Open software—
Material reviewed: Repository documentationA lightweight package described as a minimal-interaction honeypot, combining a Python port-listening script with a PHP web backend to log incoming connections.
NetworkApplicationHoneypot
Open software—
Material reviewed: Repository documentationWeb application honeypot implemented as a Java servlet; documentation mentions GET/POST handling and a self-learning approach.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationWeb-application honeypot designed to detect attempts to exploit the Bash remote-code vulnerability CVE-2014-6271.
ApplicationHoneypot
Open software—
Material reviewed: Repository metadataCritical readingReactive web honeypot component developed by the mushorg team.
ApplicationHoneypot
Framework or guide—
Material reviewed: Repository documentationSpamtrap is a Rails gem that protects forms from spambots through opt-in, combinable mechanisms including hidden honeypot fields, nonces, field name mutation, and a minimum fill-time check.
ApplicationHoneypotDecoy
Open software—
Material reviewed: Repository documentationMiddleware for PHP applications that adds a hidden form field as a spambot trap and checks whether it was changed.
ApplicationHoneypot
Paper—
Material reviewed: AbstractThe thesis proposes an authentication framework combining multi-factor authentication with honeytoken-based deception techniques. It describes three successive architectures: static honeytokens to improve detection of compromised credentials, the 2FHA mechanism combining one-time passwords (Google Authenticator) with honeytokens, and a final architecture with session-bound honeytokens, blockchain-supported auditing, and smart contracts on Ethereum.
IdentityApplicationHoneytokenDecoy
Open software—
Material reviewed: Repository documentationAn internal web honeypot built with Django and Docker, designed to capture APT activity and insider intrusions using a decoy login interface.
ApplicationHoneypotDecoy
Open software—
Material reviewed: Repository documentationTools for cloning webpages, particularly login pages, and serving them as decoys. The documentation says the server reports requests to a syslog server.
ApplicationDecoy
Open software—
Material reviewed: Repository metadataArchived GitHub repository describing a fake WordPress login and registration page intended to track bot behavior. Only repository metadata is available; the bundled readme.html is the generic WordPress file and provides no project-specific documentation.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationwp-login-honeypot is a honeypot for wordpress login.php that blacklists all clients accessing it.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationWordPress plugin documenting a decoy field in comment forms to reduce spam; it is not intended to stop trackback spam.
ApplicationHoneypot
Open software—
Material reviewed: Repository documentationLow-interaction honeyclient for detecting malicious websites through signatures, anomalies, and pattern matching; it documents browser emulation and script analysis.
ApplicationHoneypot