Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
heffalump — Endless HTTP honeypot that serves infinite random data to malicious bots via a reverse-proxied URL, exhausting their memory and storage resources. | Kitploit
Tools/GitHubGitHub/earthboundkid/heffalump
Defensive ToolsWeb Security
GitHubearthboundkid/heffalump

heffalump

Endless HTTP honeypot that serves infinite random data to malicious bots via a reverse-proxied URL, exhausting their memory and storage resources.

View Repository
216108 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Heffalump GoDoc Go Report Card

Heffalump is an endless honeypot that gives malicious bots nightmares. To use, in your robots.txt tell robots not to go to a certain URL, which heffalump is reverse proxying. Any web agent that does go to the URL will receive an endless stream of random data, which will overflow its memory and/or storage if it doesn't have a max buffer size set or at the very least severely waste its time.

The source of the honeypot data is Once On a Time, one of A. A. Milne's most beloved and most public domain works.

Exploding Heffalump

Live example: Do not follow this link. It will flood your browser's memory and likely cause a crash.

Installation

First install Go.

If you just want to install the binary to your current directory and don't care about the source code, run

root@kitploit:~
GOBIN=$(pwd) GOPATH=$(mktemp -d) go get github.com/carlmjohnson/heffalump

Usage

root@kitploit:~
Usage of heffalump:

heffalump [opts]

    heffalump serves an endless HTTP honeypot

  -addr string
        Address to serve (default "127.0.0.1:8080")
  -path string
        Path to serve from. Path ending in / serves sub-paths. (default "/")
Download Tool