Honeypot Python Packages

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

wagtail-honeypot

Protect your forms with a honeypot field

cnsl

Security Layer

django-waf

Self-hosted WAF and bot management middleware for Django: rate limiting, IP/UA/CIDR block rules, HTTP fingerprinting, JS proof-of-work challenges, behavioural anomaly detection, form protection, nginx blocklist generation, and a collective threat feed. Redis-backed, fail-open.

netwatch-sec

All-In-One Network Security Dashboard

pyrdp-mitm

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

memecheck

Zero-dependency Python CLI for crypto risk: DEX + CEX pre-trade screening, position sizing, real-time monitoring, decision-engine backtest. Published to PyPI.

django-antispam

Spam protection tools for django applications.

oubliette-shield

AI LLM Firewall -- Runtime defense for LLM applications against prompt injection, jailbreak, and adversarial attacks. 9 SDK integrations, 12 LLM backends, cyber deception.

honeymcp

A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensitive tools) that act as honeypots.

heralding

Credentials catching honeypot.

acrawriter

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

cyanide-framework

Cyanide is an advanced open-source honeypot framework for cybersecurity. It emulates SSH/Telnet to lure attackers and analyze their tactics.

decoyshield

Counter-recon honeypot against agentic LLM attackers (PentestGPT/AutoGPT/LangChain). Six deploy modes: Flask drop-in, WSGI/ASGI middleware (Django/FastAPI), callable Python primitives, decoyshield CLI, edge configs (nginx/Caddy/Cloudflare), and Node.js npm package (Express/Fastify). Invisible-to-human, visible-to-LLM bait halts AI scans.

webeye

A Best Powerful module for making ethical hacking tools easier

django-amnesia-honeywords

Django authentication backend implementing Amnesia Honeywords for breach detection without a separate honeychecker. Stores k hashed candidates per user, flags logins using unmarked decoys, logs events, and emits signals for alerting. Integrates via settings + migrations; initialize users at signup/password change.

fakeshell

Fakeshellは仮想的なシェル環境を提供するパッケージです。

httpbl

Project Honeypot Http:BL API Client

lyrebird-emulator

Modern async-first internet-services emulation suite for malware-analysis labs — a defensive INetSim successor with detection telemetry (paired Sigma rules + analytics) as a first-class output.

dolost

Deceptive Operations: Lure, Observe, and Secure Tool

crewai-true402

CrewAI tools: pre-trade rug/honeypot & address safety for Base AI agents, pay-per-call over x402 (USDC, no API key)

demonhunter

A Distributed Honeypot