Skip to content

The honeypot app

funnypot-app is the standalone, deployable honeypot box that embeds the engine. Where the library packages add deception to your app, the app is a honeypot: point it at an internet-facing host and it presents a broad, believable attack surface across HTTP and many network-service protocols, records every probe, and serves only inert fakes.

What it is

  • HTTP deception via funnypot-core — hostile-looking web requests get believable fake responses instead of a real error page.
  • Network-service emulators — plausible listeners for a range of common services (databases, mail, cache, remote-access, IoT/industrial protocols, and more). Every connection is logged; nothing an attacker sends is executed, relayed, or authenticated for real.
  • A live attacker dashboard — see who's probing, with what tool, and how, in real time.

Getting it

The app is a project (not a Composer library you embed). Clone the repository and follow its README:

git clone https://github.com/metrictower/funnypot-app

Operational details — deployment, tuning, and running it in production — live in the repository's own documentation.

Run it where it belongs

A honeypot is meant for an isolated, internet-facing host you control and monitor — never bolted onto a production application host. Everything it serves is inert by design, but it is deliberately attractive to attackers.