you are here: home > security > tools > honeypot
Call trans opt: receveid. 9-18-99 14:32:31 REC:log>
WARNING: carrier anomaly
Trace program: running
> Welcome 38.107.191.97
16.03.2010 - 07:37 (06:37 GMT)
5orry, you have... NO MAIL.

Honeypot : The Complete Toolsbox

  • This category contains 9 Tools
  • The last tool was added on 2007-02-12 (YYYY-MM-DD)
  • Use the Source Lucie!!! >:)

 Honeycomb -v0.6

Published on 2004 - by Christian Kreibich, ©University of Cambridge.

Honeycomb is a system for automated generation of signatures for network intrusion detection systems (NIDSs). The system applies protocol analysis and pattern-detection techniques to traffic captured on honeypots. Using traffic on honeypots has the major advantage of concentrating on traffic that can be considered malicious by definition.

 Honeyd -v1.0

Published on 2005-01-02 - by Niels Provos, ©Niels Provos.

Honeyd is a small daemon that creates virtual hosts on a network. The hosts can be configured to run arbitrary services, and their TCP personality can be adapted so that they appear to be running certain versions of operating systems. Honeyd enables a single host to claim multiple addresses - I have tested up to 65536 - on a LAN for network simulation. Honeyd improves cyber security by providing mechanisms for threat detection and assessment. It also deters adversaries by hiding real systems in the middle of virtual systems.

 honeydsum -v0.3

Published on 2004 - by Lucio Henrique Franco and Carlos Henrique Peixoto Caetano Chaves, ©Lucio Henrique Franco and Carlos Henrique Peixoto Caetano Chaves.

honeydsum.pl is a tool written in Perl designed to generate a text summary from Honeyd logs. The summaries may be produced using different parameters as filters, such as ports, protocols, IP addresses or networks. It shows the top source and port access and the number of connections per hour, and supports input from multiple log files. The script can also correlate events from several honeypots.

 HoneyVIew -v1.0

Published on 2003-04-29 - by Karl Hable, ©Karl Hable.

HoneyVIew ist a tool to analyze honeyd-logfiles of the honeyd-daemon implemented by Niels Provos in an convenient way. HoneyView generates graphical and textual results from queries against the logfile data.

 mydoom -v0.6

Published on 2004 - by Klaus Steding-Jessen, ©Klaus Steding-Jessen.

mydoom.pl is a simple Perl script, that works with honeyd, to emulate the backdoor installed by the Mydoom virus. It saves uploaded files and also logs attempts to use the Mydoom backdoor proxy capability (socks4).

 single-honeypot -v0.2.7

Published on 2002-11-19 - by Luis Wong, ©Luis Wong.

Single-honeypot is a powerfull tool, for security interest about the estudies of techniques of breaking systems. This is, a singular or little honeypot for test your networks for hostiles visitors. This made in perl script. Simulate different services.

 spamhole -v0.5

Published on 200-12-09 - by Dr. Uid, ©Dr. Uid.

spamhole is a fake sopen SMTP relay, intended to stop (some) spam by convincing spammers that it is delivering spam messages for them, when in fact it is not.

 SPANK - System Protection Against Nasty Kids -v0.2

Published on 2004-08-24 - by spank project, ©spank project.

SPANK is a collection of programs to deploy, run and analyse network and host simulations in IP networks. This can be done for pure network and application simulation, or also for honeypot deployment to find out what is happening on your network.

 Tiny Honeypot -v0.4.6

Published on - by George Bakos, ©George Bakos.

Wouldn't it be nice if every single unsolicited connection attempt tied up the attacker who launched it by appearing to actually work, all the while providing a little insight into their motives and intents? thp appears to listen on all ports otherwise not in legitimate use, providing a series of phony responses to attacker commands. Some are very simple, others are somewhat more interactive. The goal isn't to fool a skilled, determined attacker...merely to cloud the playing field with tens of thousands of fake services, all without causing unreasonable stress on the thp host.

Search:

Search: