Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers, and brute force attempts for deception and monitoring. It uses Python-based protocol emulation within a Twisted event-driven network framework to handle concurrent connections, while maintaining an in-memory virtual filesystem that logs every read, write, and traversal operation. The honeypot distinguishes itself through LLM-driven dynamic response generation, producing context-aware shell replies that adapt to attacker commands rather than relying on static templates. A plugi
Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the entire shell interaction performed by the attacker.
.. SPDX-FileCopyrightText: 2014 Upi Tamminen .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof .. .. SPDX-License-Identifier: BSD-3-Clause
SSH Honeypot
The main features of ashmckenzie/go-sshoney are: SSH Honeypots.
Open-source alternatives to ashmckenzie/go-sshoney include: micheloosterhof/cowrie — Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers,… cryptix720/hudinx — Hudinx is a tiny interaction SSH honeypot engineered in Python to log brute force attacks and, most importantly, the… czardoz/hornet — SSH Multipot. deroux/longitudinal-analysis-cowrie — Longitudinal Analysis of SSH Cowrie Honeypot Logs. desaster/kippo — Kippo - SSH Honeypot. cowrie/cowrie — .. SPDX-FileCopyrightText: 2014 Upi Tamminen .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof .. ..…
