mhn-core-docker
A Docker-based implementation of a subset of the Modern Honey Network project that provides a containerized honeypot infrastructure. The system consists of multiple Docker containers working together: - A broker container that runs an hpfeeds broker, allowing clients to publish to channels or subscribe to channels - A cowrie container that runs the cowrie SSH/Telnet honeypot and connects to the broker to publish attack events - A dionaea container that runs the dionaea multi-protocol honeypot, connects to the broker, publishes events, and stores captured malware binaries Additional components include: - A geoloc application that subscribes to cowrie channel events and adds geolocation information - A honeymap application that creates a visual map of attacks by subscribing to the geoloc channel and serving it on port 3000 The setup requires creating a Docker network with static IP addressing and building the broker image from the provided repository. The system provides real-time visualization of honeypot activity through the web-based honeymap interface.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
A combination of honeypot, monitoring tool, and alerting system for detecting insecure configurations.
A honeypot tool to detect and log CVE-2019-19781 scan and exploitation attempts.
An SDN honeypot tool for detecting and analyzing malicious activities in Software-Defined Networking environments.
A low-interaction honeypot to detect and analyze attempts to exploit the CVE-2017-10271 vulnerability in Oracle WebLogic Server
PINNED
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.