A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.

BSD 3-Clause "New" or "Revised" License

potd

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Apache License 2.0

nsjail

GNU General Public License v2.0

firejail

OCI hook to trace syscalls and generate a seccomp profile

potd

nsjail

firejail

oci-seccomp-bpf-hook

potd

nsjail

firejail