Open software2024
Material reviewed: Repository metadataRepository about cloud-application decoys; documentation and maintenance require further review.
CloudDecoy
Open software2020
Material reviewed: Repository metadataRepository about Docker API simulation; documentation and maintenance require further review.
CloudHoneypot
Open software—
Material reviewed: Repository metadataCritical readingOpen project for creating decoy tokens that alert when someone uses them.
IdentityCloudHoneytoken
Open software—
Material reviewed: Repository documentationDocumented project implementing a Docker-based high-interaction SSH honeypot, using patched bash and OpenSSH to log commands and credentials, integrated into a larger architecture of agents and attack-detection servers.
NetworkCloudHoneypot
Open software—
Material reviewed: Repository documentationDecoy software documenting bounded simulated responses for Kubernetes and Docker APIs, Ollama and other AI APIs, a misconfigured kubelet, and HTTP probes; it records TCP and UDP interactions without replying. It supports synthetic Secret honeytokens.
CloudNetworkHoneypotHoneytoken
Open software—
Material reviewed: Repository documentationProof-of-concept tool that places breadcrumbs and decoys, such as fake files and credentials, on servers and workstations to draw attackers toward traps. It is not presented as a honeypot itself.
EndpointIdentityHoneytokenDecoy
Open software—
Material reviewed: Repository documentationWeb honeypot documented to create and monitor fake HTTP endpoints whose URLs can be distributed as honeytokens; it is designed for Heroku but can also run on a self-hosted server.
ApplicationCloudHoneypotHoneytoken
Open software—
Material reviewed: Repository documentationServerless application that creates and monitors fake HTTP endpoints for use as URL honeytokens; its documentation describes deployment with AWS Lambda and API Gateway.
ApplicationCloudHoneytokenDecoy
Open software—
Material reviewed: Repository documentationHoneyMiner is a bash script that automates the installation of a crypto currency mining tool (minergate-cli) and a honeypot agent (honeydb-agent) on remote servers, per its documentation.
NetworkCloudHoneypot
Open software—
Material reviewed: Repository documentationAgent that, according to the README, emulates multiple network services, captures interactions, and sends data to threat.gg via gRPC.
NetworkCloudHoneypot