What we know
Tool shown running against a sample malicious page or URL, with shellcode and heap-spray alerts in the example output. The README does not identify it as a honeypot.
Evidence limits
The behavior is documented, not independently verified.
Sources and provenance
- honeynet/phoneyc repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.