rhetenor/awesome-awesomeness
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Updating conversion, creating readmes

Browse Source
This commit is contained in:
Jonas Zeunert
2024-04-19 23:37:46 +02:00
parent 3619ac710a
commit 08e75b0f0a
635 changed files with 30878 additions and 37344 deletions
Download Patch File Download Diff File Expand all files Collapse all files

49
terminal/honeypots
View File

@@ -1,4 +1,4 @@
 Awesome Honeypots !Awesome Honeypots (https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg) (https://github.com/sindresorhus/awesome)
 Awesome Honeypots !Awesome Honeypots (https://cdn.rawgit.com/sindresorhus/awesome/d7305f38d29fed78fa85652e3a63e154dd8e8829/media/badge.svg) (https://github.com/sindresorhus/awesome)
A curated list of awesome honeypots, plus related components and much more, divided into categories such as Web, services, and others, with a focus on free and open source projects.
@@ -6,7 +6,7 @@
Discover more awesome lists at sindresorhus/awesome (https://github.com/sindresorhus/awesome).
 Contents
 Contents
- Awesome Honeypots !Awesome Honeypots (https://github.com/sindresorhus/awesome) (#awesome-honeypots-)
- Contents (#contents)
@@ -86,13 +86,12 @@
 - Ensnare (https://github.com/ahoernecke/ensnare) - Easy to deploy Ruby honeypot.
 - Helix (https://github.com/Zeerg/helix-honeypot) - K8s API Honeypot with Active Defense Capabilities.
 - honeycomb_plugins (https://github.com/Cymmetria/honeycomb_plugins) - Plugin repository for Honeycomb, the honeypot framework by Cymmetria.
 - honeydb (https://honeydb.io/downloads) - Multi-service honeypot that is easy to deploy and configure. Can be configured to send interaction data to to HoneyDB's centralized collectors for access via REST 
API.
 - honeydb (https://honeydb.io/downloads) - Multi-service honeypot that is easy to deploy and configure. Can be configured to send interaction data to to HoneyDB's centralized collectors for access via REST API.
 - honeyntp (https://github.com/fygrave/honeyntp) - NTP logger/honeypot.
 - honeypot-camera (https://github.com/alexbredo/honeypot-camera) - Observation camera honeypot.
 - honeypot-ftp (https://github.com/alexbredo/honeypot-ftp) - FTP Honeypot.
 - honeypots (https://github.com/qeeqbox/honeypots) - 25 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc,
mssql, elastic, ldap, ntp, memcache, snmp, oracle, sip and irc).
 - honeypots (https://github.com/qeeqbox/honeypots) - 25 different honeypots in a single pypi package! (dns, ftp, httpproxy, http, https, imap, mysql, pop3, postgres, redis, smb, smtp, socks5, ssh, telnet, vnc, mssql, elastic, ldap, 
ntp, memcache, snmp, oracle, sip and irc).
 - honeytrap (https://github.com/honeytrap/honeytrap) - Advanced Honeypot framework written in Go that can be connected with other honeypot software.
 - HoneyPy (https://github.com/foospidy/HoneyPy) - Low interaction honeypot.
 - Honeygrove (https://github.com/UHH-ISS/honeygrove) - Multi-purpose modular honeypot based on Twisted.
@@ -126,8 +125,8 @@
 - GasPot (https://github.com/sjhilt/GasPot) - Veeder Root Gaurdian AST, common in the oil and gas industry.
 - SCADA honeynet (http://scadahoneynet.sourceforge.net) - Building Honeypots for Industrial Networks.
 - gridpot (https://github.com/sk4ld/gridpot) - Open source tools for realistic-behaving electric grid honeynets.
 - scada-honeynet (http://www.digitalbond.com/blog/2007/07/24/scada-honeynet-article-in-infragard-publication/) - Mimics many of the services from a popular PLC and better helps SCADA researchers understand 
potential risks of exposed control system devices.
 - scada-honeynet (http://www.digitalbond.com/blog/2007/07/24/scada-honeynet-article-in-infragard-publication/) - Mimics many of the services from a popular PLC and better helps SCADA researchers understand potential risks of exposed 
control system devices.
- Other/random
@@ -136,8 +135,7 @@
 - dicompot (https://github.com/nsmfoo/dicompot) - DICOM Honeypot.
 - IPP Honey (https://gitlab.com/bontchev/ipphoney) - A honeypot for the Internet Printing Protocol.
 - Log4Pot (https://github.com/thomaspatzke/Log4Pot) - A honeypot for the Log4Shell vulnerability (CVE-2021-44228).
 - Masscanned (https://github.com/ivre/masscanned) - Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to 
GreyNoise.
 - Masscanned (https://github.com/ivre/masscanned) - Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
 - medpot (https://github.com/schmalle/medpot) - HL7 / FHIR honeypot.
 - NOVA (https://github.com/DataSoft/Nova) - Uses honeypots as detectors, looks like a complete system.
 - OpenFlow Honeypot (OFPot) (https://github.com/upa/ofpot) - Redirects traffic for unused IPs to a honeypot, built on POX.
@@ -168,10 +166,9 @@
- Distributed sensor deployment
 - Community Honey Network (https://communityhoneynetwork.readthedocs.io/en/stable/) - CHN aims to make deployments honeypots and honeypot management tools easy and flexible. The default deployment method uses 
Docker Compose and Docker to deploy with a few simple commands.
 - Modern Honey Network (https://github.com/threatstream/mhn) - Multi-snort and honeypot sensor management, uses a network of VMs, small footprint SNORT installations, stealthy dionaeas, and a centralized 
server for management.
 - Community Honey Network (https://communityhoneynetwork.readthedocs.io/en/stable/) - CHN aims to make deployments honeypots and honeypot management tools easy and flexible. The default deployment method uses Docker Compose and Docker
to deploy with a few simple commands.
 - Modern Honey Network (https://github.com/threatstream/mhn) - Multi-snort and honeypot sensor management, uses a network of VMs, small footprint SNORT installations, stealthy dionaeas, and a centralized server for management.
- Network Analysis Tool
@@ -210,8 +207,7 @@
- Passive network audit framework parser
 - Passive Network Audit Framework (pnaf) (https://github.com/jusafing/pnaf) - Framework that combines multiple passive and automated analysis techniques in order to provide a security assessment of network 
platforms.
 - Passive Network Audit Framework (pnaf) (https://github.com/jusafing/pnaf) - Framework that combines multiple passive and automated analysis techniques in order to provide a security assessment of network platforms.
- VM monitoring and tools
@@ -267,8 +263,7 @@
 - honeytrap (https://github.com/tillmannw/honeytrap) - Low-interaction honeypot and network security tool written to catch attacks against TCP and UDP services.
 - imap-honey (https://github.com/yvesago/imap-honey) - IMAP honeypot written in Golang.
 - mwcollectd (https://www.openhub.net/p/mwcollectd) - Versatile malware collection daemon, uniting the best features of nepenthes and honeytrap.
 - potd (https://github.com/lnslbrty/potd) - Highly scalable low- to medium-interaction SSH/TCP honeypot designed for OpenWrt/IoT devices leveraging several Linux kernel features, such as namespaces, seccomp 
and thread capabilities.
 - potd (https://github.com/lnslbrty/potd) - Highly scalable low- to medium-interaction SSH/TCP honeypot designed for OpenWrt/IoT devices leveraging several Linux kernel features, such as namespaces, seccomp and thread capabilities.
 - portlurker (https://github.com/bartnv/portlurker) - Port listener in Rust with protocol guessing and safe string display.
 - slipm-honeypot (https://github.com/rshipp/slipm-honeypot) - Simple low-interaction port monitoring honeypot.
 - telnet-iot-honeypot (https://github.com/Phype/telnet-iot-honeypot) - Python telnet honeypot for catching botnet binaries.
@@ -326,8 +321,7 @@
 - Thug Distributed Task Queuing (https://thug-distributed.readthedocs.io/en/latest/index.html)
 - Trigona (https://www.honeynet.org/project/Trigona)
 - URLQuery (https://urlquery.net/)
 - YALIH (Yet Another Low Interaction Honeyclient) (https://github.com/Masood-M/yalih) - Low-interaction client honeypot designed to detect malicious websites through signature, anomaly, and pattern matching 
techniques.
 - YALIH (Yet Another Low Interaction Honeyclient) (https://github.com/Masood-M/yalih) - Low-interaction client honeypot designed to detect malicious websites through signature, anomaly, and pattern matching techniques.
- Honeypot
@@ -463,8 +457,8 @@
- Honeytokens
 - CanaryTokens (https://github.com/thinkst/canarytokens) - Self-hostable honeytoken generator and reporting dashboard; demo version available at CanaryTokens.org (https://canarytokens.org/generate).
 - Honeybits (https://github.com/0x4D31/honeybits) - Simple tool designed to enhance the effectiveness of your traps by spreading breadcrumbs and honeytokens across your production servers and workstations to 
lure the attacker toward your honeypots.
 - Honeybits (https://github.com/0x4D31/honeybits) - Simple tool designed to enhance the effectiveness of your traps by spreading breadcrumbs and honeytokens across your production servers and workstations to lure the attacker toward 
your honeypots.
 - Honeyλ (HoneyLambda) (https://github.com/0x4D31/honeylambda) - Simple, serverless application designed to create and monitor URL honeytokens, on top of AWS Lambda and Amazon API Gateway.
 - dcept (https://github.com/secureworks/dcept) - Tool for deploying and detecting use of Active Directory honeytokens.
 - honeyku (https://github.com/0x4D31/honeyku) - Heroku-based web honeypot that can be used to create and monitor fake HTTP endpoints (i.e. honeytokens).
@@ -506,8 +500,7 @@
- Sandbox-as-a-Service
 - Hybrid Analysis (https://www.hybrid-analysis.com) - Free malware analysis service powered by Payload Security that detects and analyzes unknown threats using a unique Hybrid Analysis technology.
 - Joebox Cloud (https://jbxcloud.joesecurity.org/login) - Analyzes the behavior of malicious files including PEs, PDFs, DOCs, PPTs, XLSs, APKs, URLs and MachOs on Windows, Android and Mac OS X for suspicious 
activities.
 - Joebox Cloud (https://jbxcloud.joesecurity.org/login) - Analyzes the behavior of malicious files including PEs, PDFs, DOCs, PPTs, XLSs, APKs, URLs and MachOs on Windows, Android and Mac OS X for suspicious activities.
 - VirusTotal (https://www.virustotal.com/) - Analyze suspicious files and URLs to detect types of malware, and automatically share them with the security community.
 - malwr.com (https://malwr.com/) - Free malware analysis service and community.
@@ -533,8 +526,8 @@
 - HoneyMap (https://github.com/fw42/honeymap) - Real-time websocket stream of GPS events on a fancy SVG world map.
 - HoneyStats (https://sourceforge.net/projects/honeystats/) - Statistical view of the recorded activity on a Honeynet.
 - HpfeedsHoneyGraph (https://github.com/yuchincheng/HpfeedsHoneyGraph) - Visualization app to visualize hpfeeds logs.
 - IVRE (https://github.com/ivre/ivre) - Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Criminalip / Shodan / ZoomEye / Censys and 
GreyNoise, run your Passive DNS service, collect and analyse network intelligence from your sensors, and much more!
 - IVRE (https://github.com/ivre/ivre) - Network recon framework, published by @cea-sec & @ANSSI-FR. Build your own, self-hosted and fully-controlled alternatives to Criminalip / Shodan / ZoomEye / Censys and GreyNoise, run your 
Passive DNS service, collect and analyse network intelligence from your sensors, and much more!
 - Kippo stats (https://github.com/mfontani/kippo-stats) - Mojolicious app to display statistics for your kippo SSH honeypot.
 - Kippo-Graph (https://bruteforcelab.com/kippo-graph) - Full featured script to visualize statistics from a Kippo SSH honeypot.
 - The Intelligent HoneyNet (https://github.com/jpyorre/IntelligentHoneyNet) - Create actionable information from honeypots.
@@ -548,8 +541,8 @@
- Deployment
 - Dionaea and EC2 in 20 Minutes (http://andrewmichaelsmith.com/2012/03/dionaea-honeypot-on-ec2-in-20-minutes/) - Tutorial on setting up Dionaea on an EC2 instance.
 - Using a Raspberry Pi honeypot to contribute data to DShield/ISC (https://isc.sans.edu/diary/22680) - The Raspberry Pi based system will allow us to maintain one code base that will make it easier to collect 
rich logs beyond firewall logs.
 - Using a Raspberry Pi honeypot to contribute data to DShield/ISC (https://isc.sans.edu/diary/22680) - The Raspberry Pi based system will allow us to maintain one code base that will make it easier to collect rich logs beyond firewall
logs.
 - honeypotpi (https://github.com/free5ty1e/honeypotpi) - Script for turning a Raspberry Pi into a HoneyPot Pi.
- Research Papers