HoneyThing
A honeypot that emulates vulnerable TR-069 (CWMP) devices to detect and analyze attacks targeting IoT modems/routers.
What is HoneyThing?
HoneyThing is a honeypot that emulates IoT devices using the TR-069 (CWMP) protocol, commonly found in modems and routers. It simulates vulnerabilities like Misfortune Cookie and Rom-0 to attract attackers, log their activities, and help security researchers analyze threats targeting embedded systems.
Security researchers, IoT security professionals, and network administrators focused on detecting and studying attacks against TR-069-enabled devices.
It provides a specialized, open-source honeypot for TR-069 devices with realistic protocol emulation and vulnerability simulation, filling a gap in IoT threat detection tools.
Overview
TR-069 Honeypot
Use Cases
Best For
- Detecting and analyzing attacks targeting TR-069 (CWMP) devices
- Studying exploitation attempts against RomPager vulnerabilities
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
