Tech riderRev. 22 Sept 2026

ADBHoney

3 lines stated Written from the maker's own pages: github.com

Overview

ADBHoney is ranked #17 of 18 in honeypot software on Specifiction. It runs on Self-hosted.

Purpose: ADBHoney is a low interaction honeypot designed to catch malware pushed to devices with Android Debug Bridge exposed over TCP/IP.github.com · 4 Oct 2026
Protocol: It accepts ADB connect, push, and shell operations.github.com · 4 Oct 2026
Captured data: Data is redirected to stdout and uploaded files are saved to disk.github.com · 4 Oct 2026
Shell responses: Only `adb shell ls` currently returns a unique response; other commands respond with `command not found`.github.com · 4 Oct 2026
Limitations: Advanced commands such as native directory listing and an interactive shell are not supported.github.com · 4 Oct 2026
Configuration: The `adbhoney.cfg` file must be beside `run.py` or at `/etc/adbhoney.cfg`.github.com · 4 Oct 2026
Deployment: The README describes running the Python script or building and running a Docker container.github.com · 4 Oct 2026
Resource use: The README says CPU and memory usage should be fairly low.github.com · 4 Oct 2026
Support: For issues involving protocol behavior, the maintainer asks for a `.pcap` or very exact reproduction steps.github.com · 4 Oct 2026
License: The repository identifies its license as GPL-3.0.github.com · 4 Oct 2026
Maker: The GitHub profile identifies huuck as Gabriel Cirlig.github.com · 4 Oct 2026

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.