28 open-source projects similar to cryptix720/hudinx, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.
Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers, and brute force attempts for deception and monitoring. It uses Python-based protocol emulation within a Twisted event-driven network framework to handle concurrent connections, while maintaining an in-memory virtual filesystem that logs every read, write, and traversal operation. The honeypot distinguishes itself through LLM-driven dynamic response generation, producing context-aware shell replies that adapt to attacker commands rather than relying on static templates. A plugi
.. SPDX-FileCopyrightText: 2014 Upi Tamminen .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof .. .. SPDX-License-Identifier: BSD-3-Clause
Longitudinal Analysis of SSH Cowrie Honeypot Logs
Fake sshd that logs ip addresses, usernames, and passwords.
The security agent that fights back. Watches your Linux server from inside, detects threats with kernel-level eBPF, and stops them with on-device AI. Open-source, self-hosted, dry-run by default. Apache-2.0.
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
A SSH Server in Go that logs username/password combos
A low/zero interaction ssh authentication logging honeypot
SSH, FTP and Telnet honeypots based on Twisted
Kojoney2 is a low interaction SSH honeypot written in Python. Based on Kojoney by Jose Antonio Coret
Yet another no-frills low-interaction ssh honeypot in Go.
A low-to-medium interaction SSH Honeypot with features to capture terminal activity and upload to asciinema.org
Endlessh is an SSH tarpit and network honeypot designed to mitigate automated SSH brute force attacks. It acts as a defensive layer that protects servers by diverting malicious connection attempts into a slow-motion trap. The project implements a tarpit by sending endless, throttled banners to clients, which keeps connections open indefinitely to occupy attacker resources and slow down network scans. The service includes connection rate limiting to prevent system resource exhaustion and provides monitoring through connection activity and diagnostic data logging to system logs. Process manage
HonSSH is designed to log all SSH communications between a client and server.
The sshd-honeypot is a modified version of the OpenSSH deamon that forwards commands to Cowrie where all commands are interpreted and returned. The sshd-honeypot is designed to let Cowrie log brute force attacks and the shell interaction performed by the attacker. As the sshd-honeypot uses…
Docker container running cowrie with DShield output enabled.