glutton
A protocol-agnostic, low-interaction honeypot that intercepts and logs network traffic to analyze malicious activities.
What is glutton?
Glutton is a low-interaction honeypot that intercepts network traffic across multiple protocols to log and analyze malicious activities. It uses iptables and TPROXY to redirect traffic to protocol handlers, helping security teams detect attacks and study threat behavior. The tool is designed to be lightweight and extensible for various network security scenarios.
Security researchers, network administrators, and cybersecurity professionals who need to monitor and analyze malicious network traffic in controlled environments.
Developers choose Glutton for its protocol-agnostic design, allowing it to intercept and log traffic across any protocol without being tied to specific services. Its use of iptables and TPROXY provides efficient traffic redirection, making it a flexible and low-resource solution for honeypot deployments.
Overview
Generic Low Interaction Honeypot
Use Cases
Best For
- Setting up honeypots to detect network intrusions
- Logging and analyzing malicious traffic patterns
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
