Ghost-usb
A honeypot that emulates USB storage devices to detect and capture malware that spreads via USB propagation.
What is Ghost-usb?
Ghost USB honeypot is a security tool that emulates USB storage devices to detect malware that spreads via USB propagation. It tricks infected machines into attempting to infect the emulated device, revealing the presence of such malware without needing prior threat intelligence. Originally developed for a bachelor thesis, it is now maintained within the Honeynet Project.
Security researchers, IT administrators, and organizations monitoring for USB-based malware threats in Windows environments, particularly those concerned with physical device attack vectors.
It provides a specialized, low-overhead method for detecting USB-propagating malware without relying on signatures, offering unique visibility into threats that exploit physical media in Windows systems.
Overview
A honeypot for malware that propagates via USB storage devices
Use Cases
Best For
- Detecting malware that spreads via USB storage devices in Windows environments
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
