The Honeynet Project
Honeypots and Threat Intelligence R&D
- 109
- Projects
- 11
- Years accepted
- 8
- In 2026
Projects by year
1092026
8 acceptedShow
GreedyBear: Dashboard Modularization
Accepted project · by armoredvortex
This project aims to refactor GreedyBear's dashboard into a fully configuration-driven widget system, giving administrators the power to tailor the...
GreedyBear Injection Event Collector API
Accepted project · by Dorna Raj Gyawali
This project proposes a secure, scalable push-based API designed to transform GreedyBear into an open data sink for the global honeypot community....
IntelOwl: Integrating a Self-Deployed LLM Chatbot for Threat Intelligence
Accepted project · by Francesco Berardi
This project aims to transform how analysts interact with threat intelligence data in IntelOwl by introducing a conversational AI interface....
Hardening EventHorizon with OpenTelemetry and Bio Inspired Deception Across IoT Protocol Tarpits
Accepted project · by Haydar Amru Revanda
EventHorizon is a multi protocol IoT tarpit framework designed to trap automated network scanners. However, its current static deception mechanisms...
Greedybear: Access payload files
Accepted project · by Krishna Awasthi
The goal of this project is to improve GreedyBear’s threat intelligence capabilities by incorporating honeypot payload files received from T-Pot....
Expanding Artemis Coverage with Improved Discovery and Vulnerability Detection
Accepted project · by Rafli Permana
Artemis currently requires all targets to go through the full discovery pipeline even when the HTTP endpoint is already known, lacks deep crawling...
IntelOwl: Integration Ecosystem & Connector Optimization
Accepted project · by sanjib2006
This project aims to harden IntelOwl's connector ecosystem - the critical egress layer for routing threat intelligence data by resolving Django ORM...
Improving the DICOMHawk Medical Honeypot: Profile-Driven Deception with Fingerprinting & Sandbox
Accepted project · by Vibe
DICOMHawk is an open-source honeypot that emulates a vulnerable DICOM medical imaging server to attract and log unauthorized access attempts. The...
2025
9 acceptedShow
This project aims to enhance Artemis, a modular vulnerability scanner, by automating technology-specific scans, expanding vulnerability detection,...
This project aims to add more analyzers to Intelowl further enhancing it's capabilities and refactoring the old ones which are not working as per...
DICOMHawk is a honeypot system designed to emulate a vulnerable DICOM (Digital Imaging and Communications in Medicine) server, primarily to detect,...
Problem: IP cameras are frequent targets for cyberattacks due to their widespread use and often weak security. Current honeypots like SweetCam lack...
Alerting Module Enhancement: Standardization, Customization, and Improvements
Accepted project · by kunalsz
This project aims to enhance BuffaLogs alerting system by integrating new alerters, standardizing configurations, and introducing advanced features...
Glutton : Refactoring protocol parsers originally written in Go into Spicy
Accepted project · by Namay Rohatgi
The proposed project aims to develop Spicy-based protocol parsers for HTTP and DNS. Although Go is an efficient language used for system programming...
BuffaLogs: Developing BuffaCLI for Command-Line Management and BuffaWatch for Real-Time Log Tracking
Accepted project · by Onunwa Goodness
BuffaLogs is a tool designed to detect anomalous login activities. However, it currently lacks real-time analysis of login data and only offers a web...
This project aims to improve the testing framework for IntelOwl analyzers by transitioning from the existing monkeypatch-based approach to a more...
This project addresses the challenge of enhancing Glutton's protocol parsing capabilities by implementing HTTP and DNS parsers using Spicy, a...
2024
9 acceptedShow
- New Analyzers for IntelOwlNilayGupta
- Extending The Artemis ScannerKshitij Kapoor
- Improving the Functionality of Honeyscanner: A Honeypot Vulnerability Analyzer.SeanB.
- ML-based web attack classification project for TANNERHinna Zeejah
- Proposal for New Documentation Site for IntelOwl and friendsAryan Bhokare
- Improving the functionality of Honeyscanner: a honeypot vulnerability analyzerDar
- Extending the DRAKVUF Sandbox analytic pipelineYacine Elhamer
- Improve features for DNS and HTTP3 in mitmproxyGaurav J.
- Improve the onboarding experience on mitmwebMatteo Luppi
2023
6 acceptedShow
- Frontend Improvements for BuffaLogs, Intelowl.Abheek Tripathy
- Honeyscanner: a vulnerability analysis tool for honeypotsAristofanis Chionis
- Riotpot: improving the IoT/OT honeypotElisa Tsai
- mitmproxy - transparent mode on Linux and OSx in RustEmanuele Micheletti
- Ochi usability improvementsKumiszhan
- Import / Export of HAR files addition to mitmproxyNathaniel Good
2022
6 acceptedShow
- Bridge Qiling with other static analysis softwareJing Liu
- RIoTPot: A Shapeshifting honeypotryaben
- IntelOwl v4 improvementsAditya Pratap Singh
- QUIC Support in mitmproxyManuel Meitinger
- Creating Playbooks for IntelOwlAditya Narayan Sinha
- Intelowl Go ClientHussain Khan
2021
11 acceptedShow
- PcapMonkey ImprovementsHariom Chaturvedi
- IntelOwl Connectors Manager and IntegrationsShubham Pandey (sp35)
- RIoTPot - Honeypot for IOT/OT devicesAbhimanyu Rawat
- Extending DRAKVUF by an I/O-emulation module in order to camouflage its sandbox natureJan Gruber
- IntelOwl ImprovementsSarthak Khattar
- New Rule Generation Technique & Make Quark Everywhere Among Security Open Source ProjectsYu-Shiang Dang
- Cloning and compatibility improvements for Snarekrishna11
- Replacing the core library of Quark-EngineSheng-Feng
- Make mitmweb’s UI rich and easy to useToshiaki Tanaka
- Implementing Linux support in Drakvuf-SandboxManorit Chawdhry
- A Stitch In Time (saves nine)Filip Adamik
2020
11 acceptedShow
- Improve cloning & serving functionality for Snaremzfr
- libmicrovmi – full bindings to Xen and KVMArnab Dutta
- Svmidbg: developing a Stealthy Hypervisor based VM Introspection DebuggerChristopher Pelloux
- Improving the usability of mitmproxy with new featuresMartin Plattner
- HosTaGe: a mobile honeypotIrini Lygerou
- Analytical malware classificationArmin Huremagic
- New Web Interface for IntelOwl & Adding New AnalyzersEshaan Bansal
- Expanding Clang-Tidy to include AUTOSAR complianceYannan
- Tenjint Orchestration frameworkAman Ahuja
- Enhance detection capabilities: Improve the MITRE ATT&CK coverage in Monkey by adding post-breach actionsShreya Malviya
- LibVMI as a Unikraft Applicationfelix b
2019
9 acceptedShow
- Implementing behavioral analysis for Androidmuhzi
- Operating-system fuzzing with a hypervisorAjinkya Rajput
- SSH Proxy for CowrieGuilherme Borges
- Injecting function-calls to Linux through a hypervisorAyush Dosaj
- Adding (Updating) macOS support to Cuckoo SandBoxzed009
- Operating System Fuzzing With a Hypervisor: OSFuzzVinamra Bhatia
- Heralding: RDP and VNC implementationrealsdx
- Adding Privilege escalation functionality to the monkeyDhayalan Balakrishnan
- SNARE/TANNER: ImprovementsRajat Gupta.
2018
17 acceptedShow
- Honeypot Detection ToolVlad Florea
- SNARE/TANNERViswak Hanumanth G K
- Google Protocol Buffers SerializationPietro Tirenna
- Semi-automated DroidBot: Semi-automated Android UI testingAnant Joshi
- Implementing Yara rules in HoneytrapCapacitorSet
- LibVMI extensions: Bareflank hypervisor supportBoddu Manohar Reddy
- Droidbot with AISaumo Pal
- DRAKVUF - Stealthiness ImprovementStewart Sentanoe
- Port LibVMI to Xen MiniOSLele Ma
- #9 - DRAKVUF: Support for Dynamic Malware Analysis on ARMUlrich Fourier
- Thug: Python 3 Port and PyV8 ReplacementArushit Mudgal
- Automated Malware Relationship Miningctsung
- DRAKVUF : Process Injector EnhancementMathieu Dolmen
- #15 - CONPOT: Protocols Wave #2Abhinav Saxena
- Trusted Execution Environment Based Dynamic Analysis on ARMHarikrishnan R
- Mitmproxy improvementsRoman Samoilenko
- New exploiters in Infection MonkeyVakaris
2017
12 acceptedShow
- Android Sandbox Detection and Countermeasure ProposalZiyue Yang
- Conpot improvementsYuru Shao
- Automated Malware Relationships Detection ToolDonika Mirdita
- Protocol and adversary identification in GoNikolaos Filippakis
- Glutton EnhancementM Bilal Arif
- Proposal to the Honeynet Project.kajoj
- Mitmweb ImproveMatthew Shao
- SNARE/TANNERRavinder Nehra
- Holmes Framework to Automate Advanced AnalyticsChristian von Pentz
- Building examples services for Holmes processingManohar Reddy
- Long term analysisRicardo van Zutphen
- Mitmproxy CoreUjjwal Verma
2016
11 acceptedShow
- Foundations for DRAKVUF on ARMSergej Proskurin
- Improving mitmproxydufferZafar
- Rumal Dennis Parchkovgarou6666
- Context based fuzzy clustering of malwareKacper
- Integrate DroidBOT into Cuckoo SandboxTin Duong
- Centralized Service Configuration for HolmesMa-Shell
- Improving the coverage of DroidBotlynnlyc
- YAPDNSsystem64
- Web Interface and Generic API Development for Holmes Processingcvp
- [MITMProxy] Clemens BrunnerClemens Brunner
- Vulnerability emulation for SNARE and TANNERafeena
