Skip to content
Python low-interaction honeyclient
Python JavaScript Other
Latest commit 5af3a51 May 25, 2016 @buffer Merge pull request #169 from kevthehermit/master
Use Mongo connection string in place of host:port


The number of client-side attacks has grown significantly in the past few years shifting focus on poorly protected vulnerable clients. Just as the most known honeypot technologies enable research into server-side attacks, honeyclients allow the study of client-side attacks.

A complement to honeypots, a honeyclient is a tool designed to mimic the behavior of a user-driven network client application, such as a web browser, and be exploited by an attacker's content.

Thug is a Python low-interaction honeyclient aimed at mimicing the behavior of a web browser in order to detect and emulate malicious contents.


Documentation about Thug installation and usage can be found in the source tree or alternatively at



Thug is open source and free to use for any purpose (even commercial ones). If you use and appreciate Thug, consider supporting the project with a donation using Paypal (details at

License information

Copyright (C) 2011-2016 Angelo Dell'Aera

License: GNU General Public License, version 2; see COPYING.txt included in this archive for details.

Something went wrong with that request. Please try again.