The honeypot app¶
funnypot-app is the standalone, deployable honeypot box that embeds the engine. Where the library packages add deception to your app, the app is a honeypot: point it at an internet-facing host and it presents a broad, believable attack surface across HTTP and many network-service protocols, records every probe, and serves only inert fakes.
What it is¶
- HTTP deception via funnypot-core — hostile-looking web requests get believable fake responses instead of a real error page.
- Network-service emulators — plausible listeners for a range of common services (databases, mail, cache, remote-access, IoT/industrial protocols, and more). Every connection is logged; nothing an attacker sends is executed, relayed, or authenticated for real.
- A live attacker dashboard — see who's probing, with what tool, and how, in real time.
Getting it¶
The app is a project (not a Composer library you embed). Clone the repository and follow its README:
Operational details — deployment, tuning, and running it in production — live in the repository's own documentation.
Run it where it belongs
A honeypot is meant for an isolated, internet-facing host you control and monitor — never bolted onto a production application host. Everything it serves is inert by design, but it is deliberately attractive to attackers.