Kippo - SSH Honeypot
The main features of desaster/kippo are: Honeypots and Deception, Security And Privacy, SSH Honeypots, Testing and Honeypots.
Open-source alternatives to desaster/kippo include: micheloosterhof/cowrie — Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers,… paralax/awesome-honeypots — an awesome list of honeypot resources. jaksi/sshesame — An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity. innerwarden/innerwarden — The security agent that fights back. Watches your Linux server from inside, detects threats with kernel-level eBPF,… tnich/honssh — HonSSH is designed to log all SSH communications between a client and server. telekom-security/tpotce — T-Pot is a multi-honeypot platform and threat intelligence framework that deploys a collection of containerized decoy…
Cowrie is an SSH and Telnet honeypot that simulates vulnerable services to capture attacker commands, file transfers, and brute force attempts for deception and monitoring. It uses Python-based protocol emulation within a Twisted event-driven network framework to handle concurrent connections, while maintaining an in-memory virtual filesystem that logs every read, write, and traversal operation. The honeypot distinguishes itself through LLM-driven dynamic response generation, producing context-aware shell replies that adapt to attacker commands rather than relying on static templates. A plugi
An easy to set up and use SSH honeypot, a fake SSH server that lets anyone in and logs their activity
The security agent that fights back. Watches your Linux server from inside, detects threats with kernel-level eBPF, and stops them with on-device AI. Open-source, self-hosted, dry-run by default. Apache-2.0.
an awesome list of honeypot resources