What we know
Extensible SSH honeypot written in Go using crypto/ssh to accept connections and log failed login attempts, including usernames and passwords. It supports dropping process privileges and includes a Lua-based plugin engine to process captured information, plus a virtual filesystem to more convincingly emulate a system.
Evidence limits
The documentation notes that a legacy libssh-based branch is not fully tested and is buggy; the described behavior has not been independently verified.
Sources and provenance
- wisepythagoras/honeyshell repository
repository-documentation · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.