Honeypot Python Packages

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

22K 129 25

wagtail-honeypot

Protect your forms with a honeypot field

7K 11 4

cowrie

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

4K 7K 1K

cnsl

Security Layer CNSL Brain

4K 14 1

pyrdp-mitm

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

4K 2K 274

crewai-true402

CrewAI tools: pre-trade rug/honeypot & address safety for Base AI agents, pay-per-call over x402 (USDC, no API key)

3K 0 0

game-true402

Virtuals Protocol GAME functions: pre-trade rug/honeypot & address safety for Base agents, pay-per-call over x402 (USDC, no API key). PyPI: game-true402

2K 0 0

honeypot-auditor

Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like an honeypot — using Honeyscore, active auth/state probes, and a weighted score.

1K 11 2

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

1K 988 142

django-antispam

Spam protection tools for django applications.

1K 51 8

uhbs

Universal Honeypot Benchmarking Standard (UHBS) v5.0.x — open-source framework for vendor-neutral honeypot / deception evaluation

1K 2 0

django-amnesia-honeywords

Django authentication backend implementing Amnesia Honeywords for breach detection without a separate honeychecker. Stores k hashed candidates per user, flags logins using unmarked decoys, logs events, and emits signals for alerting. Integrates via settings + migrations; initialize users at signup/password change.

992 0 0

drosera

A carnivorous honeypot for autonomous AI agents. Sweet-looking bait. Sticky ending.

925 3 0

oubliette-shield

AI LLM Firewall -- Runtime defense for LLM applications against prompt injection, jailbreak, and adversarial attacks. 9 SDK integrations, 12 LLM backends, cyber deception.

842 0 0

heralding

Credentials catching honeypot

785 397 79

netwatch-sec

All-In-One Network Security Dashboard

693 27 2

acrawriter

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

508 1K 140

honeymcp

A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensitive tools) that act as honeypots.

455 26 2

decoyshield

Counter-recon honeypot against agentic LLM attackers (PentestGPT/AutoGPT/LangChain). Six deploy modes: Flask drop-in, WSGI/ASGI middleware (Django/FastAPI), callable Python primitives, decoyshield CLI, edge configs (nginx/Caddy/Cloudflare), and Node.js npm package (Express/Fastify). Invisible-to-human, visible-to-LLM bait halts AI scans.

280 3 0