
SSH-Honeypot
Create Basic SSH Honeypot With Python

Create Basic SSH Honeypot With Python

Simple TCP/UDP honeypot implemented in Perl

Lightweight web-attack monitor. One Go binary + SQLite. Not OSSEC, not a WAF.

A Zeek OpenVPN protocol analyzer plugin.

Lightweight Python-based IDS that monitors network traffic in real-time using Scapy, detecting DoS/DDoS attacks via per-IP request rate analysis with…

Lightweight scriptable honeypot runner

Blue-team SIEM lab: Wazuh 4.7.5 detecting 7 simulated attacks (SSH brute force, Slowloris DoS / CVE-2007-6750, web attacks) with real-time MITRE…

Enrich the conn.log with EDR data

Very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support


BlueHound - pinpoint the security issues that actually matter


DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!

Use dropbear over wireguard.

ioc2rpz is a place where threat intelligence meets DNS.

asadbg is a framework of tools to aid in automating live debugging of Cisco ASA devices

TheLightScope

LLMNR/NBNS/mDNS Spoofing Detection Toolkit