Deception Python Packages

cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

honeypot-auditor

Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like an honeypot — using Honeyscore, active auth/state probes, and a weighted score.

heralding

Credentials catching honeypot

dolost

Deceptive Operations: Lure, Observe, and Secure Tool

demonhunter

Distributed Honeypot

buda

Behavioral User-driven Deceptive Activities Framework

sundewsh

A carnivorous honeypot for AI agents. Every deployment generates a unique persona so no two instances look alike. Detects, fingerprints, and classifies autonomous agent attacks in real time.

trappsec

deception as a developer tool