Framework or guide—
Material reviewed: Repository documentationA Laravel 5.4/5.5 package that adds hidden honeypot fields (a decoy input and an encrypted timestamp) to forms to detect and block automated spam submissions, building on prior work by Ian Landsman and Maksim Surguy.
ApplicationHoneytoken
Framework or guide—
Material reviewed: Repository documentationA Django application that adds hidden honeypot fields to web forms via template tags, view decorators, and middleware, aiming to detect and block automated spam submissions.
ApplicationHoneypot
Framework or guide—
Material reviewed: Repository documentationHoneycomb is an open-source honeypot framework created by Cymmetria that allows running honeypots with various integrations via a public plugin library, and makes it easy to write new honeypot services.
NetworkApplicationHoneypot
Framework or guide—
Material reviewed: Repository documentationhoneypot_recipes is a Chef cookbook that automates deployment of activity-monitoring tools (Sysdig and Falco) on Linux systems to support high-interaction honeypots, capturing and logging system calls. The tools themselves are monitoring infrastructure, not a honeypot: they provide logging and detection support used alongside a high-interaction honeypot.
NetworkEndpoint
Framework or guide—
Material reviewed: Public pageCritical readingKnowledge base of defensive techniques with terminology related to decoys.
NetworkDecoy
Framework or guide—
Material reviewed: Public pageCritical readingFramework for planning and communicating denial, deception and adversary engagement.
NetworkCloudAdversary engagement
Framework or guide—
Material reviewed: Repository documentationA set of Ansible playbooks to deploy and configure several existing honeypot servers (Cowrie, Mailoney, Wordpot, UDPot, iplog) alongside an open-relay Postfix mail server.
NetworkApplicationHoneypot
Framework or guide—
Material reviewed: Repository documentationEducational project combining a Snort-based IPS on a software-defined network (SDN) with OpenFlow, capable of dynamically redirecting suspicious traffic to a honeypot server for analysis instead of outright blocking it.
NetworkHoneypotDecoy
Framework or guide—
Material reviewed: Repository documentationSpamtrap is a Rails gem that protects forms from spambots through opt-in, combinable mechanisms including hidden honeypot fields, nonces, field name mutation, and a minimum fill-time check.
ApplicationHoneypotDecoy