DemonHunter Logo

DemonHunter

0
Free
Visit Website

DemonHunter is a distributed low interaction honeypot with an Agent/Master design. Agents are honeypots of different protocols, and the master receives attack information to show to honeypot administrators. By using DemonHunter, you can choose from various protocol handlers like Apache(v2.4.18) or Nginx(1.10.0) without needing to install anything extra on your server. Each Agent can handle multiple protocols, and each master can manage an unlimited number of agents. DemonHunter is developed under python3.6 and may work on python3.5. For documentation, visit http://demonhunter.readthedocs.io. To install the latest version, use: $ pip install git+https://github.com/RevengeComing/DemonHunter.git or $ pip install demonhunter from PyPI. To run DemonHunter, execute dh_run for the Master and set up Agents (Honeypots). Running the dh cli will start the master at http://127.0.0.1:8000 with a sqlitedb in the current directory.

FEATURES

ALTERNATIVES

Medium interaction SSH honeypot for logging brute force attacks and shell interactions.

A honeypot tool that simulates an open relay to capture and analyze spam

A multiarch honeypot platform supporting 20+ honeypots and offering visualization options and security tools.

A FTP honeypot tool for detecting and capturing malicious file upload attempts.

A highly interactive honeypot for observing access from attackers by building easily targeted and compromised web applications, forwarding logs to Google BigQuery for accumulation and visualization.

A simple honeypot that collects credentials across various protocols

Galah is an LLM-powered web honeypot that mimics various web applications by dynamically responding to HTTP requests.

A subset of the Modern Honey Network project set up to run in docker, including hpfeeds broker, cowrie honeypot, and dionaea honeypot.