Open software2016
Material reviewed: Repository metadataRepository about capture of IoT botnet binaries; documentation and maintenance require further review.
IoTHoneypot
Open software—
Material reviewed: Repository metadataCritical readingLow-interaction honeypot simulating the Android Debug Bridge service.
IoTHoneypot
Open software—
Material reviewed: Repository documentationA MicroPython honeypot for the ESP8266 microcontroller that emulates a Telnet server to attract and observe attack attempts against exposed Telnet devices.
IoTNetworkHoneypot
Open software—
Material reviewed: Repository documentationHoneyPi is a bash script to install and run various honeypot projects on a Raspberry Pi running Raspbian, serving as an installation guide.
NetworkIoTHoneypot
Open software—
Material reviewed: Repository documentationProof-of-concept observation-camera honeypot documenting a watermark, daylight intensity, and automatic refresh.
IoTHoneypot
Open software—
Material reviewed: Repository documentationHoneypot that simulates a modem or router with a RomPager web server and TR-069 support; it documents vulnerability emulation and communication logging.
IoTNetworkHoneypot
Open software—
Material reviewed: Repository documentationA Python tool that simulates an IoT device (router) to log attacker IP addresses and activity into a logfile and MySQL database, using cloned web pages as a decoy front end.
IoTNetworkHoneypotDecoy
Open software—
Material reviewed: Repository documentationA Python-based honeypot designed to emulate the Mirai malware, with separate listener and C2 components, aimed at scalable and easy setup.
IoTNetworkHoneypot
Open software—
Material reviewed: Repository documentationHoneypot software that simulates embedded-device services and vulnerabilities to record requests, origins, and, where supported, payloads; includes Telnet, HTTP, and HTTPS servers.
IoTNetworkHoneypot
Open software—
Material reviewed: Repository documentationmehrai is a Docker-based honeypot whose purpose is catching Mirai binaries, using an Alpine Linux image to mimic an IoT device and monitoring the filesystem and processes to collect samples and submit them to the Viper API.
IoTEndpointHoneypot
Open software—
Material reviewed: Repository documentationConfigurable honeypot that responds to expected scanner commands, such as Mirai's, to fingerprint their IP addresses; supports file and syslog output.
NetworkIoTHoneypot
Open software—
Material reviewed: Repository documentationA simple telnet honeypot created to show, in a security talk, how easy it is to code a telnet honeypot in order to recover IoT malware and observe active command and control.
IoTNetworkHoneypot
Open software—
Material reviewed: Repository metadataCritical readingPlatform combining multiple honeypots and analysis tools in one deployment.
NetworkIoTHoneypot
Open software—
Material reviewed: Repository documentationHoneypot that emulates a default Belkin N300 wireless router administration interface to observe traffic directed at home routers.
NetworkIoTHoneypotDecoy