$\"GreedyBear\"/$

\n\n# GreedyBear\n[![GitHub release (latest by date)](https://img.shields.io/github/v/release/GreedyBear-Project/Greedybear)](https://github.com/GreedyBear-Project/Greedybear/releases)\n[![GitHub Repo stars](https://img.shields.io/github/stars/GreedyBear-Project/Greedybear?style=social)](https://github.com/GreedyBear-Project/Greedybear/stargazers)\n![GitHub License](https://img.shields.io/github/license/GreedyBear-Project/GreedyBear)\n\n[![uv](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/uv/main/assets/badge/v0.json)](https://github.com/astral-sh/uv)\n[![Ruff](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json)](https://github.com/astral-sh/ruff)\n[![ty](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ty/main/assets/badge/v0.json)](https://github.com/astral-sh/ty)\n[![CodeQL](https://github.com/GreedyBear-Project/GreedyBear/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/GreedyBear-Project/GreedyBear/actions/workflows/codeql-analysis.yml)\n[![Dependency Review](https://github.com/GreedyBear-Project/GreedyBear/actions/workflows/dependency_review.yml/badge.svg)](https://github.com/GreedyBear-Project/GreedyBear/actions/workflows/dependency_review.yml)\n[![Pull request automation](https://github.com/GreedyBear-Project/GreedyBear/actions/workflows/pull_request_automation.yml/badge.svg)](https://github.com/GreedyBear-Project/GreedyBear/actions/workflows/pull_request_automation.yml)\n\nThe project goal is to extract attack data detected by a [T-Pot](https://github.com/telekom-security/tpotce) or a cluster of them and to generate some feeds that can be used to prevent and detect attacks. You can read the [official announcement here](https://www.honeynet.org/2021/12/27/new-project-available-greedybear/).\n\n## How to ...\n- **... try it out**: visit the [public instance](https://greedybear.honeynet.org) provided by [The Honeynet Project](https://www.honeynet.org) and take a look at a [threat intelligence live feed example](https://greedybear.honeynet.org/api/feeds/cowrie/all/recent.txt)\n- **... dive in**: read through our documentation in the [Wiki](https://github.com/GreedyBear-Project/GreedyBear/wiki) and explore GreedyBear's features\n- **... run your own instance**: to leverage everything GreedyBear has to offer, you might want to [install](https://github.com/GreedyBear-Project/GreedyBear/wiki/Installation) it and connect it to your own T-Pot\n- **... stay up to date**: [read](https://greedybear-project.github.io/) and [subscribe](https://greedybear-project.github.io/feed.xml) to our blog, where we regularly write about the most recent changes and new features\n- **... contact us**: using a Github [issue](https://github.com/GreedyBear-Project/GreedyBear/issues) or start a [discussion](https://github.com/GreedyBear-Project/GreedyBear/discussions)\n- **... contribute**: read through our [contribution guidelines](https://github.com/GreedyBear-Project/GreedyBear/wiki/Contribute), open an [issue](https://github.com/GreedyBear-Project/GreedyBear/issues), get assigned and raise a [pull request](https://github.com/GreedyBear-Project/GreedyBear/pulls)\n\n## Sponsors and Acknowledgements\n\n#### The Honeynet Project\n\n $\"Honeynet.org$ \n\n[The Honeynet Project](https://www.honeynet.org) is a non-profit organization working on creating open source cyber security tools and sharing knowledge about cyber threats.\n\nThanks to [The Honeynet Project](https://www.honeynet.org) we are providing free public feeds available [here](https://greedybear.honeynet.org).\n\n#### Google Summer of Code\n $\"GSoC$ \n\nIn 2026 we participated in the [Google Summer of Code](https://summerofcode.withgoogle.com/) and three projects were successfully implemented.\n\nIf you are interested in participating in the next Google Summer of Code, check all the info available in the [wiki](https://github.com/GreedyBear-Project/GreedyBear/wiki/Google-Summer-of-Code)!\n\n## Maintainers and Contributors\n\nThis project was started as a personal Christmas project by [Matteo Lodi](https://twitter.com/matte_lodi) in 2021.\n\nSpecial thanks to:\n- [Tim Leonhard](https://github.com/regulartim) for having greatly improved the project and added Machine Learning Models during his master thesis. He's the current Principal Maintainer.\n- [Martina Carella](https://github.com/carellamartina) for having created the GUI during her master thesis.\n- Our GSoC 2026 participants [Drona Raj Gyawali](https://github.com/drona-gyawali), [Krishna Awasthi](https://github.com/opbot-xd) and [Rachit Kumar Pandey](https://github.com/armoredvortex) for having built the [event collector API](https://www.honeynet.org/2026/08/11/11/), the [payload access feature](https://www.honeynet.org/2026/08/17/17/) and the [dashboard modularization](https://www.honeynet.org/2026/08/14/16/).\n- and everyone else who has contributed to GreedyBear!\n\n\n $\"GreedyBear$ \n\n\n## License\nDistributed under the MIT license. See [`LICENSE`](LICENSE) for the full text.\n","has_starred","hub_user","mattelodi","immutable_tags_settings",{"_213":11,"_214":215},"enabled","rules",[216],".*","is_automated","permissions",{"_220":21,"_221":11,"_222":11},"read","write","admin","user","storage_size",176069466713,"isOrg","reponame","tag","sha256:e158c7838e6e7891542d4706289d86d3aa3d9e420b3c2a65ec060bd587a40152","canDeleteTags","isHubSbxKitsEnabled","currentTab","tagAttestations","displaySecurityMetadata","showSbxLogoOverride","routes/_layout.layers.$namespace.$reponame.$tag.(images).($imageUrlDigest)._index",{"_27":28,"_164":-7,"_162":-7,"_163":-7,"_29":238,"_35":229,"_241":-7,"_242":11},{"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":239,"_60":61,"_62":34,"_63":64,"_65":66,"_67":68,"_69":70,"_71":49,"_72":61,"_73":58,"_74":21},[240],{"_44":45,"_35":36,"_46":47,"_48":49,"_50":51,"_52":53,"_54":47,"_55":-5,"_56":38,"_57":58,"_59":-5},"imageWithLayers","hasPermissionToViewRepoSettings","actionData","errors"]

intelowlproject/greedybear:stag