IntelOwl: manage your Threat Intelligence at scale

OWASP Honeypot, Automated Deception Framework.

🐝 A highly scalable, safe, free enterprise honeypots 一款高可扩展、安全、免费的企业级蜜罐系统

HASH (HTTP Agnostic Software Honeypot)

A low/zero interaction ssh authentication logging honeypot

Built a mini HoneyNet in Azure and ingest log sources from various resources into a Log Analytics workspace

A structured list of honeypots software that allows quickly searches.

Final Project about Distributed Honeypot Network built with Linux Container using Docker (Server Side)

🛡️ Zero-config hardware honeypot on a single ESP32-S3 — fake RTSP/HTTP/Telnet/SSH/FTP traps that capture attacker credentials, MAC/vendor & User-Agent, with Telegram alerts and a dark-mode dashboard. Pure ESP-IDF / C, no cloud, no Raspberry Pi.

Longtail OpenSSH integrated into the honeynet

HoneyPy API for BeeTracé

Longtail Telnet integrated into the honeynet

Adaptive multi-layered honeynet architecture for threat behavior analysis via machine learning, selective escalation, and deception-driven telemetry.

A lightweight, dynamic CLI honeypot designed to simulate vulnerable services and trap malicious actors. Perfect for threat detection, research, and intrusion analysis on micro or resource-constrained systems.

Tweaked scripts for the deployment of Dionaea through MHN

A system to gather suspicious URLs from SSH honeynets and to semi-automatically evaluate whether they are malicious or not.

Deployed a real-time SOC and honeynet in Microsoft Azure using Sentinel (SIEM), Log Analytics Workspace, and KeyVault. Integrated Windows and Linux VMs, SQL Database, and automated log analysis with KQL to boost threat monitoring and incidents response. Implemented cloud security best practices and hardening to reduce incidents/malicious activities

My take on hardening a Azure Honeynet.

A lightweight honeynet simulation using Docker Compose to emulate common attack surfaces via vulnerable SSH, FTP, and HTTP services.

A comprehensive cybersecurity project building a SOC and Honeynet in Microsoft Azure to capture, analyze, and mitigate live attack traffic using Microsoft Sentinel.