{"id":13795419,"url":"https://github.com/sec51/honeymail","last_synced_at":"2026-02-12T07:26:37.818Z","repository":{"id":100715749,"uuid":"51484053","full_name":"sec51/honeymail","owner":"sec51","description":"SMTP honeypot written in Golang","archived":false,"fork":false,"pushed_at":"2016-08-09T13:32:15.000Z","size":21331,"stargazers_count":28,"open_issues_count":3,"forks_count":6,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-11-18T10:33:26.579Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sec51.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2016-02-11T00:29:25.000Z","updated_at":"2024-09-21T11:45:02.000Z","dependencies_parsed_at":null,"dependency_job_id":"d5f0a7f2-7ad7-4758-8ea2-b5f64fcd653a","html_url":"https://github.com/sec51/honeymail","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sec51%2Fhoneymail","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sec51%2Fhoneymail/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sec51%2Fhoneymail/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sec51%2Fhoneymail/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sec51","download_url":"https://codeload.github.com/sec51/honeymail/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253840965,"owners_count":21972570,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T23:00:56.413Z","updated_at":"2026-02-12T07:26:37.770Z","avatar_url":"https://github.com/sec51.png","language":"Go","funding_links":[],"categories":["\u003ca id=\"a53d22b9c5d09dc894413453f4755658\"\u003e\u003c/a\u003e未分类","Honeypots"],"sub_categories":[],"readme":"[![Build Status](https://travis-ci.org/sec51/honeymail.svg?branch=master)](https://travis-ci.org/sec51/honeymail)\n### Status\n\n**The project is being actively developed.**  \nThis honeypot has been tested by **Sec51** however **we cannot guarantee that it's bug free!**  \nAttackers may be able to gain access to your honeypot server in case of severe bugs.  \n**Use at your own risk !**  \nWe are not responsible for any damages caused by this software.  \nFor more information see the license.\n\n### SMTP honeypot\n\nHere a list of features developed so far:\n\n- [x] Configurable response messages to avoid honeypot detection.\n- [x] Support for STARTTLS\n- [X] Support for TLS\n- [X] Storage of emails in a BoltDB file, separated by day.\n- [X] API to retrieve today's emails and specific email via its id. (API is under heavy development to add additional capabilities)\n- [x] Automatically extracts several information from the email, like: list of urls, source domain, country, attachments, email parts (HTML or TXT).\n- [x] Sha256 hash of email parts and fields like: FROM, TO, CC, attachments.\n- [x] API and allows to browse different days: `/api/emails/today` or `/api/emails/YYYY-MM-dd`\n- [x] Simple DDoS protection in case spammers try to establish many connections and never finish sending data.\n\n### Future development\n\n- [ ] Process the attachments with YARA and Cuckoo to automatically create yara rules\n- [ ] Create a web UI to visualize the stored information\n- [ ] Improve the API and allow to retrieve an email via the SHA256 hash of its parts (TO, FROM etc...)\n- [ ] Extract additional configuration parameters which are now hard coded (Example: amount of times a client needs to fail to send emails before it gets locked down)\n\n### How to run it:\n\n1) Generate a public/private key via:\n\n`openssl req -newkey rsa:2048 -nodes -keyout smtp.key -x509 -days 365 -out smtp.crt`\n\n2) Move the newly created certificates to a `cert` folder.\n\n3) Configure your remote ip address or ip address list in the `conf/development.conf` or `conf/production.conf` INI config file.\nThis will allow only your IP to connect to the API. In addition set the path of the certificates.\n\n4) Run the binary via:\n\n`setcap 'cap_net_bind_service=+ep' honeymail`\n\n5) Access the api via:\n\nTo see today's emails:\n\n- `/api/emails/today`\n\nTo see a specific date emails:\n\n- `/api/emails/2010-07-30`\n\nTo see a spefici email (you can find the id from the list return from /api/emails):\n\n- `/api/email?id=49689cfcb7fcbf83ed95df3a65ae6d9047678ca1`\n\nPlease report any bugs you will encounter.\n\n### Dependencies\n\nThe project is now using go vendoring. So all dependencies are inside the `vendor` folder.\n\n### License\n\nCopyright (c) 2016 Sec51.com \u003cinfo@sec51.com\u003e\n\nPermission to use, copy, modify, and distribute this software for any\npurpose with or without fee is hereby granted, provided that the above \ncopyright notice and this permission notice appear in all copies.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\" AND THE AUTHOR DISCLAIMS ALL WARRANTIES\nWITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF\nMERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR\nANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES\nWHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN\nACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF\nOR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. ","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsec51%2Fhoneymail","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsec51%2Fhoneymail","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsec51%2Fhoneymail/lists"}