Exploitation Tools

HoneyPy – A Low To Medium Interaction Honeypot

HoneyPy - A Low To Medium Interaction Honeypot

[sc name=”ad_1″]

A low interaction honeypot with the capability to be more of a medium interaction honeypot.
HoneyPy is written in Python2 and is intended to be easy to:

  • install and deploy
  • extend with plugins and loggers
  • run with custom configurations

Feel free to follow the QuickStart Guide to dive in directly. The main documentation can be found at the HoneyPy Docs site.
Live HoneyPy data gets posted to:

Leave an issue or feature request! Use the GitHub issue tracker to tell us whats on your mind.
Pull requests are welcome! If you would like to create new plugins or improve existing ones, please do.
NOTE: HoneyPy has primarily been tested and run on Debian and Ubuntu using Python 2.7.9.

Overview
HoneyPy comes with a lot of plugins included. The level of interaction is determined by the functionality of the used plugin. Plugins can be created to emulate UDP or TCP based services to provide more interaction. All activity is logged to a file by default, but posting honeypot activity to Twitter or a web service endpoint can be configured as well.
Examples:

  • Plugins:
    • ElasticSearch
    • SIP
    • etc.
  • Loggers:
    • HoneyDB
    • Twitter
    • etc.