Honeypot Python Packages

mockssh

Mock an SSH server and define all commands it supports (Python, Twisted)

16K 130 25

wagtail-honeypot

Protect your forms with a honeypot field

6K 11 4

pyrdp-mitm

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

3K 2K 272

cyanide-honeypot

Cyanide is an advanced open-source honeypot framework for cybersecurity. It emulates SSH/Telnet to lure attackers and analyze their tactics.

2K 20 0

decoyshield

Web-layer counter-recon honeypot against agentic LLM attackers - drops invisible-to-human, visible-to-LLM payloads into HTTP responses to halt, stall, or fingerprint AI-driven penetration scans.

2K 1 0

django-antispam

Spam protection tools for django applications.

2K 51 8

honeypots

30 different honeypots in one package! (dhcp, dns, elastic, ftp, http proxy, https proxy, http, https, imap, ipp, irc, ldap, memcache, mssql, mysql, ntp, oracle, pjl, pop3, postgres, rdp, redis, sip, smb, smtp, snmp, socks5, ssh, telnet, vnc)

1K 971 137

heralding

Credentials catching honeypot.

1K 392 78

cowrie

Cowrie SSH/Telnet Honeypot.

974 6K 1K

acrawriter

Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.

643 1K 136

cyanide-framework

Cyanide is an advanced open-source honeypot framework for cybersecurity. It emulates SSH/Telnet to lure attackers and analyze their tactics.

487 20 0

dolost

Deceptive Operations: Lure, Observe, and Secure Tool

483 7 1

oubliette-shield

AI LLM Firewall -- Runtime defense for LLM applications against prompt injection, jailbreak, and adversarial attacks

470 0 0

httpbl

Python client library for the project-honeypot.org Http:BL API

456 8 4

webeye

Webeye is a Powerful package for making ethical hacking tools easier

432 12 2

fakeshell

Fakeshellは仮想的なシェル環境を提供するパッケージです。

356 14 0

honeymcp

A Deception Security Layer for MCP Servers. It injects "ghost tools" (fake security-sensitive tools) that act as honeypots.

350 19 2

honeycomb-framework

An extensible honeypot framework

269 95 21

agent-trap

Counter-recon honeypot against agentic LLM attackers (PentestGPT/AutoGPT/LangChain). Six deploy modes: Flask drop-in, WSGI/ASGI middleware (Django/FastAPI), callable Python primitives, decoyshield CLI, edge configs (nginx/Caddy/Cloudflare), and Node.js npm package (Express/Fastify). Invisible-to-human, visible-to-LLM bait halts AI scans.

245 2 0