ADBHoney

6.0easy start · #15 of 18
in Honeypot Software

Runs on self-hosted.

ADBHoney is ranked #15 of 18 in honeypot software on The Geeks Club. It runs on Self-hosted.

Compared on honeypot software

Beelzebub 0 of 4 in the starter kit Lesson 17.5 OpenCanary 0 of 4 in the starter kit Lesson 27.3 Canarytokens 0 of 4 in the starter kit Lesson 37.0 Cowrie 0 of 4 in the starter kit Lesson 47.0 Heralding 0 of 4 in the starter kit Lesson 56.9 T-Pot 0 of 4 in the starter kit Lesson 66.9

Purpose: ADBHoney is a low interaction honeypot designed to catch malware pushed to devices with Android Debug Bridge exposed over TCP/IP.
Protocol: It accepts ADB connect, push, and shell operations.
Captured data: Data is redirected to stdout and uploaded files are saved to disk.
Shell responses: Only `adb shell ls` currently returns a unique response; other commands respond with `command not found`.
Limitations: Advanced commands such as native directory listing and an interactive shell are not supported.
Configuration: The `adbhoney.cfg` file must be beside `run.py` or at `/etc/adbhoney.cfg`.
Deployment: The README describes running the Python script or building and running a Docker container.
Resource use: The README says CPU and memory usage should be fairly low.
Support: For issues involving protocol behavior, the maintainer asks for a `.pcap` or very exact reproduction steps.
License: The repository identifies its license as GPL-3.0.
Maker: The GitHub profile identifies huuck as Gabriel Cirlig.

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.