Elastic honey
A honeypot designed to detect and log attacks targeting Elasticsearch remote code execution vulnerabilities.
What is Elastic honey?
Elastichoney is a honeypot specifically designed to mimic a vulnerable Elasticsearch server, catching attackers who attempt to exploit remote code execution (RCE) vulnerabilities. It logs these attacks to provide insights into exploitation techniques and threat actor behavior. The tool helps in identifying malicious activity targeting Elasticsearch clusters.
Security researchers, system administrators, and DevOps teams responsible for monitoring and securing Elasticsearch deployments against external threats.
It offers a lightweight, easy-to-deploy solution focused solely on Elasticsearch RCE attack detection, with Docker support for containerized environments and configurable logging for flexible integration into security workflows.
Overview
A Simple Elasticsearch Honeypot
Use Cases
Best For
- Monitoring Elasticsearch clusters for exploitation attempts
- Gathering threat intelligence on RCE attack patterns
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
