Tool not found.
Back to Home
Multi-protocol network honeypot that mimics common services to detect and alert on attackers who have breached a non-public network, with extremely low resource requirements.
OpenCanary is a multi-protocol network honeypot designed to catch attackers after they've breached non-public networks. It runs as a lightweight daemon implementing multiple common network protocols to mimic real services, and sends alerts through various mechanisms as soon as an attacker interacts with one of them, flagging the source IP and likely point of breach. Written in Python, the core honeypot is cross-platform, though some optional modules (like the Windows File Share/Samba module and the iptables-based Portscan module) require specific operating systems, with Linux offering the fullest feature set. OpenCanary has extremely low resource requirements and can run comfortably on a Raspberry Pi or a minimal VM. It supports optional SNMP detection via Scapy and can be deployed directly on Linux/macOS, via Docker or Docker Compose, through the pkgx package manager, or with a dedicated Ansible role. OpenCanary is the open-source counterpart to Thinkst's commercial Thinkst Canary honeypot product, and is released under the BSD 3-Clause License.
