Projects per cycle
The Honeynet Project, 2016 to 2026
View as table
| Projects | |
|---|---|
| 2016 | 11 |
| 2017 | 12 |
| 2018 | 17 |
| 2019 | 9 |
| 2020 | 11 |
| 2021 | 11 |
| 2022 | 6 |
| 2023 | 6 |
| 2024 | 9 |
| 2025 | 9 |
| 2026 | 8 |
PROJECTS
The Honeynet Project GSoC projects
109 accepted projects across 11 cycles, 2016 to 2026. Each one links to its contributor, mentors and code.
Projects listed
109
Across 11 cycles
In GSoC 2026
8
9 in 2025
Busiest cycle
2018
17 projects
Mentors named
81
Across all listed projects
First cycle
2016
Latest 2026
GreedyBear: Dashboard Modularization
armoredvortex
This project aims to refactor GreedyBear's dashboard into a fully configuration-driven widget system, giving administrators the power to tailor the...
GreedyBear Injection Event Collector API
Dorna Raj Gyawali
This project proposes a secure, scalable push-based API designed to transform GreedyBear into an open data sink for the global honeypot community....
IntelOwl: Integrating a Self-Deployed LLM Chatbot for Threat Intelligence
Francesco Berardi
This project aims to transform how analysts interact with threat intelligence data in IntelOwl by introducing a conversational AI interface....
Hardening EventHorizon with OpenTelemetry and Bio Inspired Deception Across IoT Protocol Tarpits
Haydar Amru Revanda
EventHorizon is a multi protocol IoT tarpit framework designed to trap automated network scanners. However, its current static deception mechanisms...
Greedybear: Access payload files
Krishna Awasthi
The goal of this project is to improve GreedyBear’s threat intelligence capabilities by incorporating honeypot payload files received from T-Pot....
Expanding Artemis Coverage with Improved Discovery and Vulnerability Detection
Rafli Permana
Artemis currently requires all targets to go through the full discovery pipeline even when the HTTP endpoint is already known, lacks deep crawling...
IntelOwl: Integration Ecosystem & Connector Optimization
sanjib2006
This project aims to harden IntelOwl's connector ecosystem - the critical egress layer for routing threat intelligence data by resolving Django ORM...
Improving the DICOMHawk Medical Honeypot: Profile-Driven Deception with Fingerprinting & Sandbox
Vibe
DICOMHawk is an open-source honeypot that emulates a vulnerable DICOM medical imaging server to attract and log unauthorized access attempts. The...
Extending the Artemis scanner
Abhinav KarnMentored by Krzysztof Zając
This project aims to enhance Artemis, a modular vulnerability scanner, by automating technology-specific scans, expanding vulnerability detection,...
IntelOwl Improvements: Analyzers and Integrations
akshitmaheshwaryMentored by Matteo Lodi, Daniele Rosetti, Federico Gibertoni
This project aims to add more analyzers to Intelowl further enhancing it's capabilities and refactoring the old ones which are not working as per...
Improving the DICOMHawk medical honeypot
Anshikaa SharmaMentored by Manolis, Karina E, Georgios Theodoridis
DICOMHawk is a honeypot system designed to emulate a vulnerable DICOM (Digital Imaging and Communications in Medicine) server, primarily to detect,...
Improving the SweetCam IP camera honeypot
c1nkMentored by Manolis, Arthur Cordeiro, Dario Maddaloni
Problem: IP cameras are frequent targets for cyberattacks due to their widespread use and often weak security. Current honeypots like SweetCam lack...
Alerting Module Enhancement: Standardization, Customization, and Improvements
kunalszMentored by Federico Foschini2, Lorena Goldoni
This project aims to enhance BuffaLogs alerting system by integrating new alerters, standardizing configurations, and introducing advanced features...
Glutton : Refactoring protocol parsers originally written in Go into Spicy
Namay RohatgiMentored by Lukas Rist, Bilal Arif
The proposed project aims to develop Spicy-based protocol parsers for HTTP and DNS. Although Go is an efficient language used for system programming...
BuffaLogs: Developing BuffaCLI for Command-Line Management and BuffaWatch for Real-Time Log Tracking
Onunwa GoodnessMentored by Federico Foschini2, Lorena Goldoni
BuffaLogs is a tool designed to detect anomalous login activities. However, it currently lacks real-time analysis of login data and only offers a web...
IntelOwl improvements: refactor analyzer tests
Pranjal GuptaMentored by Matteo Lodi, Daniele Rosetti, Federico Foschini2
This project aims to improve the testing framework for IntelOwl analyzers by transitioning from the existing monkeypatch-based approach to a more...
Implementing Protocol Parsers for Glutton Using Spicy
Suyash HandaMentored by Lukas Rist, Bilal Arif
This project addresses the challenge of enhancing Glutton's protocol parsing capabilities by implementing HTTP and DNS parsers using Spicy, a...
New Analyzers for IntelOwl
NilayGuptaMentored by Matteo Lodi, Daniele Rosetti
With this, we're diving deep into data! The vibrant security-analysts user base of intel owl has an active fleet of in demand analyzers (around 50...
ML-based web attack classification project for TANNER
Hinna ZeejahMentored by Evgeniia Tokarchuk
The rise of sophisticated web attacks poses significant challenges to current detection mechanisms, often relying on traditional regex-based...
Proposal for New Documentation Site for IntelOwl and friends
Aryan BhokareMentored by Matteo Lodi, Daniele Rosetti
This project aims to enhance the documentation infrastructure of IntelOwl by migrating from ReadTheDocs to Mkdocs and leveraging GitHub Pages for...
Extending The Artemis Scanner
Kshitij KapoorMentored by Krzysztof Zając
The proposal aims to enhance Artemis' vulnerability detection capabilities while optimizing performance and providing a modern, accessible user...
Improving the Functionality of Honeyscanner: A Honeypot Vulnerability Analyzer.
SeanB.Mentored by Shreyas Srinivasa, Manolis, Aristofanis Chionis
My proposal aims to do several objectives in enhancing the Honeyscanner tool's effectiveness with network security assessments on honeypots. Firstly,...
Improving the functionality of Honeyscanner: a honeypot vulnerability analyzer
DarMentored by Shreyas Srinivasa, Manolis, Aristofanis Chionis
I want to improve a Honeyscanner, which is a honeypot vulnerability analyzer. It automatically attacks a given honeypot, to determine if the honeypot...
Extending the DRAKVUF Sandbox analytic pipeline
Yacine ElhamerMentored by Jarosław Jedynak
This project aims at enhancing the current DRAKVUF Sandbox by: - extracting common TTPs and displaying them in accordance with the MITTRE ATT&CK...
Improve features for DNS and HTTP3 in mitmproxy
Gaurav J.Mentored by Maximilian Hils, Emanuele Micheletti
The projects' main focus is to debug and fix/improve various missing bits in DNS/HTTP3. Features implemented include adding support for DNS-over-TCP...
Improve the onboarding experience on mitmweb
Matteo LuppiMentored by Maximilian Hils, Emanuele Micheletti
I propose enhancing the visibility and user-friendliness of switching proxy modes and improving the local mode experience in `mitmweb`. To begin...
Ochi usability improvements
KumiszhanMentored by Lukas Rist
Ochi project is used for presenting events in real-time which are generated by Glutton. The existing tool has limited functionality and will benefit...
mitmproxy - transparent mode on Linux and OSx in Rust
Emanuele MichelettiMentored by Maximilian Hils, Thomas Kriechbaumer
The problem to solve is the implementation of a truly transparent mode on mitmproxy both in OSx and Linux (Issue #1261 unsolved since 2016). I plan...
Import / Export of HAR files addition to mitmproxy
Nathaniel GoodMentored by Maximilian Hils, Thomas Kriechbaumer
My proposal aims to add HAR file support to mitmproxy. This will include the new feature in mitmproxy that allows users to import HAR files into the...
Riotpot: improving the IoT/OT honeypot
Elisa TsaiMentored by Shreyas Srinivasa, Manolis
I plan to enhance the RIoTPot by adding new emulated protocols (HTTPS, SFTP, SNMP). I also plan to increase RIoTPot's ability to evade being detected...
Frontend Improvements for BuffaLogs, Intelowl.
Abheek TripathyMentored by Matteo Lodi, Daniele Rosetti, Aditya Narayan Sinha +1
I propose to improvising frontend for BuffaLogs, implementing graphs, maps for better data visualisations plus authentications using JWT. I would...
Honeyscanner: a vulnerability analysis tool for honeypots
Aristofanis ChionisMentored by Shreyas Srinivasa, Manolis, ryaben
A honeypot is a security resource that mimics a vulnerable system and is used to lure and trap cyber-attackers. Over the last decade, many...
Bridge Qiling with other static analysis software
Jing LiuMentored by Ziqiao Kong
My entire project aims to bridge Qiling with other static analysis software, thus providing users with high-level concepts like stack frame, CFG and...
RIoTPot: A Shapeshifting honeypot
ryabenMentored by Shreyas Srinivasa, Manolis
# Advance Device Profiles --- To enhance RIoTPot with pre-set and custom device profiles. The profiles will be displayed using an interface that...
QUIC Support in mitmproxy
Manuel MeitingerMentored by Maximilian Hils
mitmproxy is a superb tool for security and privacy forensics. It currently supports HTTP/1 and HTTP/2, but lacks support for QUIC and HTTP/3. This...
Intelowl Go Client
Hussain KhanMentored by Eshaan Bansal, Shubham Pandey
I propose making a robust Go client library for OSINT Threat Intelligence Platform IntelOwl that easily communicates with their API. The Intelowl Go...
IntelOwl v4 improvements
Aditya Pratap SinghMentored by Matteo Lodi, Ossigeno, Daniele Rosetti +1
Improve existing functionalities and add new ones to IntelOwl for release of v4. - Allow plugin secrets to be stored and managed from GUI #978 -...
Creating Playbooks for IntelOwl
Aditya Narayan SinhaMentored by Matteo Lodi, Ossigeno, Daniele Rosetti +1
I propose working on a new component for IntelOwl this summer - Playbooks which would help people share and run automatically, the exact...
PcapMonkey Improvements
Hariom ChaturvediMentored by Pietro Delsante, Federico Foschini
PcapMonkey provides an easy way to analyze .pcap using Suricata, Zeek, and Elastic SIEM. The goal of this proposal is to improve and enhance...
IntelOwl Connectors Manager and Integrations
Shubham Pandey (sp35)Mentored by Eshaan Bansal, Matteo Lodi
IntelOwl is an Open Source Intelligence (OSINT) solution designed with the intent to help the community to get threat intelligence data about an...
RIoTPot - Honeypot for IOT/OT devices
Abhimanyu RawatMentored by Shreyas Srinivasa, E. Vasilomanolakis
A honeypot for IOT/OT protocols with a dynamic response system that records the attack data. A tool which can help securing IOT/OT infrastructure and...
Cloning and compatibility improvements for Snare
krishna11Mentored by Evgeniia Tokarchuk, mzfr
I plan to work heavily on improving the cloning capabilities of Snare, modify and upgrade aiohttp to be compatible with Tanner (v3.7.4) and add...
IntelOwl Improvements
Sarthak KhattarMentored by Eshaan Bansal, Matteo Lodi
This project proposes a new, more robust way of verifying Analyzers’ configurations via strict rules through database models/serializers and a new...
Extending DRAKVUF by an I/O-emulation module in order to camouflage its sandbox nature
Jan GruberMentored by M. Leszczyński (CERT.PL), A. Kliś (CERT.PL)
To be a reliable black-box malware analysis system DRAKVUF has to mitigate the observer effect, which can be accomplished by defeating...
New Rule Generation Technique & Make Quark Everywhere Among Security Open Source Projects
Yu-Shiang DangMentored by JunWei Song, KunYu Chen
Quark-Engine is a rule-based android malware detection tool, However, as a contributor of both Quark and its side projects (quark-rule-generate,...
A Stitch In Time (saves nine)
Filip AdamikMentored by Shreyas Srinivasa, E. Vasilomanolakis
This proposal tackles several smaller/simpler challenges of the HosTaGe application. It focusses on addressing Logging, API Key Maintenance and...
Replacing the core library of Quark-Engine
Sheng-FengMentored by JunWei Song, KunYu Chen
In this proposal, I mainly focus on two dimensions provided by Quark-Engine, including resilience and performance. According to the mentor, there are...
Make mitmweb’s UI rich and easy to use
Toshiaki TanakaMentored by Maximilian Hils
Mitmproxy provides a lot of features for debugging, testing, and penetration testing. Mitmproxy is already a really awesome tool at this moment, but...
Implementing Linux support in Drakvuf-Sandbox
Manorit ChawdhryMentored by K. Cieśliński (CERT.PL), M. Leszczyński (CERT.PL)
Drakvuf-sandbox is a malware analysis tool that is used to analyze the behavior of the malware in a contained environment. It uses the Drakvuf engine...
Improve cloning & serving functionality for Snare
mzfrMentored by Evgeniia Tokarchuk, Lukas Rist
In this project, my focus will be on improving the snare's ability to clone and serve the pages. Also, I will add support for serving pages with TLS....
libmicrovmi – full bindings to Xen and KVM
Arnab DuttaMentored by Mathieu Tarral, rageagainsthepc
Today the VMI ecosystem is made of a multitude of applications, targeting one hypervisor or emulator, with their own semantic library, which makes...
Svmidbg: developing a Stealthy Hypervisor based VM Introspection Debugger
Christopher PellouxMentored by Tamas Lengyel, Rian Quinn
Svmidbg will be a debugger using virtual machine introspection (VMI) that tries to be stealthy by leveraging hypervisor technologies to create...
Improving the usability of mitmproxy with new features
Martin PlattnerMentored by Maximilian Hils
I propose three independent projects that improve the usability of mitmproxy for new and existing users. The first project aims to improve the...
HosTaGe: a mobile honeypot
Irini LygerouMentored by Shreyas Srinivasa, E. Vasilomanolakis
Adding new features including New Protocols Simulation and Systems Simulation. Also support for hpfeeds integration and use on Unrooted devices....
Analytical malware classification
Armin HuremagicMentored by Ricardo van Zutphen
The Cuckoo sandbox is currently undergoing a complete redesign and the goal of the project is to build a proof of concept module that uses an...
New Web Interface for IntelOwl & Adding New Analyzers
Eshaan BansalMentored by Pietro Delsante, Matteo Lodi
Intel Owl is an Open Source Intelligence, or OSINT solution to get threat intelligence data about a specific file, an IP or a domain from a single...
Expanding Clang-Tidy to include AUTOSAR compliance
YannanMentored by Tamas Lengyel, Rian Quinn
Clang-tidy is one of the best linters for C++. It currently provides static analysis for several groups of checks, including Google and Android...
Tenjint Orchestration framework
Aman AhujaMentored by Sebastian Vogl, pfohjo
Tenjint is a framework for VM Introspection developed in Python. The project aims at providing user with a Web API for the submission of samples to...
Enhance detection capabilities: Improve the MITRE ATT&CK coverage in Monkey by adding post-breach actions
Shreya MalviyaMentored by Daniel Goldberg, Shay Nehmad
As of now, Monkey covers 24 attack techniques from the MITRE ATT&CK matrix. This project aims at increasing the number of techniques by adding 11 new...
LibVMI as a Unikraft Application
felix bMentored by Tamas Lengyel, Sergej Proskurin
Virtual Machine Introspection applications often execute on the same privilege level as the hypervisor, which can have disastrous security...
Implementing behavioral analysis for Android
muhziMentored by Jurriaan Bremer, RicoVZ
Being an open-source operating system, Android is more vulnerable to attacks. This project is about adding support for automated malware analysis of...
Operating-system fuzzing with a hypervisor
Ajinkya RajputMentored by Tamas Lengyel, Bálint Varga-Perke
This project deals with extending DRAKVUF for fuzzing the operating system using hypervisor and libinjector in DRAKVUF. libinjector will be used to...
SSH Proxy for Cowrie
Guilherme BorgesMentored by Lukas Rist, Michel Oosterhof
This project’s objective is to add an SSH proxy for the Cowrie (https://www.cowrie.org/) honeypot. Currently, Cowrie emulates an SSH server using...
Injecting function-calls to Linux through a hypervisor
Ayush DosajMentored by Tamas Lengyel, Bálint Varga-Perke
This project is of type Improving an existing tool that includes cleaning up the existing codebase and adding the process injection support for Linux.
Adding (Updating) macOS support to Cuckoo SandBox
zed009Mentored by Jurriaan Bremer, RicoVZ
Cuckoo Sandbox is a malware analysis platform which performs basic static file analysis to in-depth dynamic analysis of binaries. Even though macOS...
Operating System Fuzzing With a Hypervisor: OSFuzz
Vinamra BhatiaMentored by Tamas Lengyel, Bálint Varga-Perke
Fuzzing has been a very useful technique to find bugs and vulnerabilities. Fuzzing operating systems however has been problematic when the operating...
Heralding: RDP and VNC implementation
realsdxMentored by kajoj, Johnny Vestergaard
Heralding is essentially a credentials Honeypot. It can log credentials(username & password) for many protocols, but some protocols do not transmit...
Adding Privilege escalation functionality to the monkey
Dhayalan BalakrishnanMentored by Daniel Goldberg, Ofri Ziv
New non-destructive privilege escalation exploits likerunc container escape (CVE-2019-5736) and Dirty sock (CVE-2019-7304) and Dirty cow ...
SNARE/TANNER: Improvements
Rajat Gupta.Mentored by Evgeniia Tokarchuk, Ravinder Nehra
The aim is of the project is to improve SNARE/TANNER over the summer. The major goals of the project are - Implement new emulators to support...
Honeypot Detection Tool
Vlad FloreaMentored by Marcin Szymankiewicz, Adel Karimi
The goal of this project is to create a tool that can scan a system for features which would let an attacker know prematurely it is a honeypot. This...
Google Protocol Buffers Serialization
Pietro TirennaMentored by Aldo Cortesi, Maximilian Hils, Thomas Kriechbaumer
The basic idea behind the project is to shift mitmproxy serialization process to a new, clean standard format. Using Google Protocol Buffers will...
SNARE/TANNER
Viswak Hanumanth G KMentored by Evgeniia Tokarchuk, Lukas Rist
SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. The web page is generated by cloning a real web...
Implementing Yara rules in Honeytrap
CapacitorSetMentored by Remco Verhoef
Yara is a pattern-matching DSL developed to describe malware families; in this project, it is used to describe malicious actors interacting with a...
DRAKVUF - Stealthiness Improvement
Stewart SentanoeMentored by Tamas K Lengyel, vpb
DRAKVUF (https://drakvuf.com) is an agent-less and virtualization based black-box binary analysis system. It allows users to analyze any binaries and...
LibVMI extensions: Bareflank hypervisor support
Boddu Manohar ReddyMentored by Tamas K Lengyel, Rian Quinn
Hypervisor (Virtual Machine Monitor) is a software that runs one or more virtual machines. Other than virtualization in cloud, they are also used in...
Semi-automated DroidBot: Semi-automated Android UI testing
Anant JoshiMentored by Hanno Lemoine, Yuanchun Li
The solution will consist of an Android app, that will read the input provided by the user, and generate an interaction model, which can be read by...
Droidbot with AI
Saumo PalMentored by Hanno Lemoine, Yuanchun Li
The major task to be tackled in this project is to increase the code coverage using AI. Currently droidbot performs black box testing using the GUI...
#9 - DRAKVUF: Support for Dynamic Malware Analysis on ARM
Ulrich FourierMentored by Sergej Proskurin, Tamas K Lengyel
The relevance of ARM processors is rising. Especially since ARM recently started targeting the servers and desktop market, thus going beyond the...
Automated Malware Relationship Mining
ctsungMentored by Huang Xiao, Bojan Kolosnjaji
Since last year, Holmes-Processing has acquired a large dataset of labeled malware samples, which can be used for deep learning based malware...
Port LibVMI to Xen MiniOS
Lele MaMentored by Steven Maresca, Tamas K Lengyel
In this project, the core functionalities of the LibVMI will be ported to Xen MiniOS. After ported, Xen MiniOS will have the basic capabilities of...
Thug: Python 3 Port and PyV8 Replacement
Arushit MudgalMentored by Angelo Dell'Aera
Thug is a Python low-interaction honeyclient aimed at mimicking the behavior of a web browser in order to detect and emulate malicious contents. This...
Trusted Execution Environment Based Dynamic Analysis on ARM
Harikrishnan RMentored by Peng, Yue
The purpose of this project is to constructure a monitor (like eBPF in the latest version linux kernel) in the “secure world” which can collect...
New exploiters in Infection Monkey
VakarisMentored by Daniel Goldberg, Ofri Ziv
New non-destructive vulnerabilites Oracle WebLogic vulnerability (CVE-2017-10271) and Struts RCE vulnerability (S2-045) will be added to Infection...
#15 - CONPOT: Protocols Wave #2
Abhinav SaxenaMentored by Johnny Vestergaard, /)/)
Conpot is an ICS/SCADA honeypot that supports a number of industrial protocols and environments. For Conpot to emulate industrial devices better,...
Mitmproxy improvements
Roman SamoilenkoMentored by Aldo Cortesi, Maximilian Hils, Thomas Kriechbaumer
There is one big and very interesting task. I need to Implement DSL for commands. Current implementation of Mitmproxy commands fulfills its duties,...
DRAKVUF : Process Injector Enhancement
Mathieu DolmenMentored by Tamas K Lengyel, vpb
DRAKVUF allows to inject a binary directly into a running virtual machine. The current implementation uses either CreateProcessA() or ShellExecuteA()...
Android Sandbox Detection and Countermeasure Proposal
Ziyue YangMentored by Yuanchun Li
Many Android apps are using sandbox-detection techniques, and here is an example. To make things worse, there are malware using the sandbox-detection...
Conpot improvements
Yuru ShaoMentored by Daniel Haslinger, Johnny Vestergaard
Conpot is a honeypot that handles a number of protocols (including IPMI, SNMP, BACnet, modbus and s7comm), which are usually used in industrial...
Automated Malware Relationships Detection Tool
Donika MirditaMentored by webstergd, Huang3, Zachary Hanif
The increase in volume and diversity of malware attacks has created a difficult situation for security analysts. Now more than ever, automatic...
Protocol and adversary identification in Go
Nikolaos FilippakisMentored by Lukas Rist, Hugo Gascon
When a client is connecting to a honeypot server, it is usually not legitimate traffic. However, as malware is always trying to be stealthy, the...
Glutton Enhancement
M Bilal ArifMentored by Lukas Rist
Author of glutton have proposed some new functionalities to be added in Glutton, like: Spawn Containers Support of YARA I will make code for those...
Proposal to the Honeynet Project.
kajojMentored by Daniel Haslinger, Johnny Vestergaard
Hello! Eventually it happened! I am happy to present you my final version of proposal. I have worked on it for last 2 weeks. I did all I could to...
Mitmweb Improve
Matthew ShaoMentored by Aldo Cortesi, Maximilian Hils, Clemens Brunner
Mitmweb is now shipped with our releases, supporting most of the fundamental features. However, some important features have not been brought to...
SNARE/TANNER
Ravinder NehraMentored by Evgeniia Tokarchuk, Lukas Rist
SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. The web page is generated by cloning a real web...
Holmes Framework to Automate Advanced Analytics
Christian von PentzMentored by webstergd, Ryan Harris
In this project I will design and develop a semi-generic interface that enables Holmes Processing to manage the execution of advanced statistical and...
Building examples services for Holmes processing
Manohar ReddyMentored by webstergd, Zachary Hanif
Holmes processing is a platform for large scale malware analysis. To allow for scaling and performance gains, this has required multiple techniques...
Mitmproxy Core
Ujjwal VermaMentored by Aldo Cortesi, Thomas Kriechbaumer
Project type Improve existing tool Project goal Spend the summer working on mitmproxy's core and its addons! Improving mitmproxy. Adding various...
Long term analysis
Ricardo van ZutphenMentored by Jurriaan Bremer, Alessandro Tanasi
Integrating the existing Longcuckoo into the latest version of Cuckoo Sandbox so that Cuckoo Sandbox long term analysis will be available to all...
Foundations for DRAKVUF on ARM
Sergej ProskurinMentored by webstergd, Steven Maresca, Tamas K Lengyel
Dynamic malware analysis techniques assist to fully understand the cause, intention, and extent of damage caused by malicious applications....
Improving mitmproxy
dufferZafarMentored by Maximilian Hils, Thomas Kriechbaumer
Improve mitmproxy by adding features like SQLite based flow storage, TCPflows etc. and Port pathod & mitmproxy to Python 3.
Rumal Dennis Parchkov
garou6666Mentored by Pietro Delsante, Fedele Mantuano, Andrea De Pasquale
Rumal's aim is to present visually the result from Thug, a tool for studying exploit kits. The currently available version requires some tweaks to...
Context based fuzzy clustering of malware
KacperMentored by Jurriaan Bremer, hgascon
CuckooML will deliver a mechanism to find similarities between malware through analysing reports about them. Additionally, the software will be able...
Integrate DroidBOT into Cuckoo Sandbox
Tin DuongMentored by Jurriaan Bremer, Hugo Gonzalez
Cuckcoo Sandbox is an extensible automated malware analysis tool written in Python. Although Cuckcoo Sandbox begins supporting Android OS since v2.0,...
Centralized Service Configuration for Holmes
Ma-ShellMentored by webstergd, Zachary Hanif
Holmes Processing (http://holmesprocessing.github.io) is a system used for automated malware analysis of huge volumes of malware samples, which...
Improving the coverage of DroidBot
lynnlycMentored by Hanno Lemoine, Hugo Gonzalez
DroidBot is an Android application exerciser like Monkey. It is better than Monkey in malware detection because it is aware of the static information...
YAPDNS
system64Mentored by Pietro Delsante, Fedele Mantuano, Andrea De Pasquale
Collect Passive DNS data from various sources; display, correlate and analyze them.
Web Interface and Generic API Development for Holmes Processing
cvpMentored by webstergd, Zachary Hanif
The Holmes Project is a modern, modular, and scalable environment for collaborative malware analysis and storage. Despite the relatively young age of...
[MITMProxy] Clemens Brunner
Clemens BrunnerMentored by Maximilian Hils, cortesi
MITMproxy is a console tool that allows interactive examination and modification of HTTP traffic. The aim of this project is to improve the...
Vulnerability emulation for SNARE and TANNER
afeenaMentored by Andrea De Pasquale, Lukas Rist
SNARE is a web application honeypot sensor attracting all sort of maliciousness from the Internet. The web page is generated by cloning a real web...
Data: Google Summer of Code public archive. Official GSoC archive