Skip to content

Release history

beelzebub releases

Honeypot framework designed to provide a highly secure environment for detecting and analyzing cyber attacks.

All releases

21 shown

No immediate action
v3.8.0 New feature

Preserve TCP raw bytes

No immediate action
v3.7.3 New feature

validate flag

Review required
v3.7.2 Bug fix
Dependencies

HistoryCleaner leak fix

v3.7.1 New feature
Notable features
  • Add realClientAddr configuration option
  • Improve CLI functionality and increase code coverage
Full changelog

What's Changed

  • Feat: Add realClientAddr by @mariocandela in https://github.com/beelzebub-labs/beelzebub/pull/301
  • Feat: Improve cli and code coverage by @mariocandela in https://github.com/beelzebub-labs/beelzebub/pull/303

Full Changelog: https://github.com/beelzebub-labs/beelzebub/compare/v3.7.0...v3.7.1

v3.7.0 New feature
Notable features
  • Brand new plugin system
  • Redesigned plugin architecture
Full changelog

What's Changed

  • feat: implement brand new plugin system by @mariocandela in https://github.com/beelzebub-labs/beelzebub/pull/294
  • Build(deps): Bump golang.org/x/term from 0.40.0 to 0.42.0 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/297
  • ci: run deploy only on tag by @airscripts in https://github.com/beelzebub-labs/beelzebub/pull/299

New Contributors

  • @airscripts made their first contribution in https://github.com/beelzebub-labs/beelzebub/pull/299

Full Changelog: https://github.com/beelzebub-labs/beelzebub/compare/v3.6.10...v3.7.0

v3.6.10 New feature
Notable features
  • Interactive command matching for TCP
  • LLM integration for responses
Full changelog

What's Changed

  • feat(tcp): enhance TCP strategy with interactive command matching and LLM integration by @Mic52M in https://github.com/beelzebub-labs/beelzebub/pull/287
  • Build(deps): Bump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.11.0 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/292
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.48.0 to 0.49.0 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/291

Full Changelog: https://github.com/beelzebub-labs/beelzebub/compare/v3.6.9...v3.6.10

v3.6.9 New feature
Notable features
  • Improved maze plugin
Full changelog

What's Changed

  • feat: Improve maze plugin by @mariocandela in https://github.com/beelzebub-labs/beelzebub/pull/289

Full Changelog: https://github.com/beelzebub-labs/beelzebub/compare/v3.6.8...v3.6.9

v3.6.8 Mixed
Notable features
  • Beta maze plugin for interactive honeypots
Full changelog

What's Changed

  • chore(deps): ignore golang.org/x/* bumps requiring Go 1.25.0 by @mariocandela in https://github.com/beelzebub-labs/beelzebub/pull/275
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.45.0 to 0.46.0 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/278
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.46.0 to 0.47.0 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/279
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.47.0 to 0.47.1 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/280
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.47.1 to 0.48.0 by @dependabot[bot] in https://github.com/beelzebub-labs/beelzebub/pull/281
  • feat: add beta maze plugin by @mariocandela in https://github.com/beelzebub-labs/beelzebub/pull/288

Full Changelog: https://github.com/beelzebub-labs/beelzebub/compare/v3.6.7...v3.6.8

v3.6.7 Maintenance

Routine maintenance release for beelzebub.

Changelog

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.6...v3.6.7

v3.6.6 New feature
Notable features
  • Environment variables for configuration override
  • Lazy logging initialization
Full changelog

What's Changed

  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.44.0 to 0.44.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/266
  • Build(deps): Bump golang.org/x/time from 0.12.0 to 0.14.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/267
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.44.1 to 0.45.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/270
  • feat: support environment variables for configuration override and lazy logging initialization by @mariocandela in https://github.com/mariocandela/beelzebub/pull/269

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.5...v3.6.6

v3.6.5 New feature
Notable features
  • IP-based rate limiting for LLM plugin
Full changelog

What's Changed

  • Build(deps): Bump github.com/go-resty/resty/v2 from 2.17.1 to 2.17.2 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/262
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.43.2 to 0.44.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/261
  • Build(deps): Bump github.com/melbahja/goph from 1.4.0 to 1.5.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/265
  • feat: implement ip based rate limiting for llm plugin by @Mic52M in https://github.com/mariocandela/beelzebub/pull/232

New Contributors

  • @Mic52M made their first contribution in https://github.com/mariocandela/beelzebub/pull/232 💯

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.4...v3.6.5

v3.6.4 Bug fix
Notable features
  • TELNET connection stabilization
  • LLM prompts enabled for TELNET
Full changelog

What's Changed

  • Build(deps): Bump golang.org/x/term from 0.39.0 to 0.40.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/258
  • fix: stabilize TELNET connection flow and enable LLM prompts by @YOZZOPANOZZO in https://github.com/mariocandela/beelzebub/pull/260

New Contributors

  • @YOZZOPANOZZO made their first contribution in https://github.com/mariocandela/beelzebub/pull/260 🎉

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.3...v3.6.4

v3.6.3 New feature
Notable features
  • TELNET protocol support
  • Authentication mechanisms
Full changelog

What's Changed

  • Build(deps): Bump golang.org/x/term from 0.38.0 to 0.39.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/251
  • feat: implement TELNET protocol support with authentication and comma… by @mariocandela in https://github.com/mariocandela/beelzebub/pull/253
  • Build(deps): Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/252

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.2...v3.6.3

v3.6.2 Maintenance
Notable features
  • MCP tool annotations for LLM understanding
Full changelog

What's Changed

  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.43.1 to 0.43.2 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/244
  • Build(deps): Bump golang.org/x/term from 0.37.0 to 0.38.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/246
  • Update Docker commands to use new syntax by @rempairamore in https://github.com/mariocandela/beelzebub/pull/247
  • Build(deps): Bump github.com/go-resty/resty/v2 from 2.17.0 to 2.17.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/248
  • feat: Add MCP tool annotations support for improved LLM understanding by @triepod-ai in https://github.com/mariocandela/beelzebub/pull/249

New Contributors 🎆

  • @rempairamore made their first contribution in https://github.com/mariocandela/beelzebub/pull/247
  • @triepod-ai made their first contribution in https://github.com/mariocandela/beelzebub/pull/249

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.1...v3.6.2

v3.6.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Build(deps): Bump github.com/go-resty/resty/v2 from 2.16.5 to 2.17.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/242
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.43.0 to 0.43.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/243

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.6.0...v3.6.1

v3.6.0 Bug fix
Notable features
  • Improved cloud plugin
  • Improved HTTP LLM Honeypot
Full changelog

What's Changed

  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.42.0 to 0.43.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/235
  • Build(deps): Bump golang.org/x/term from 0.36.0 to 0.37.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/238
  • Feat: Improve cloud plugin by @mariocandela in https://github.com/mariocandela/beelzebub/pull/240
  • Fix: Close log file in Builder.Close() to prevent resource leak by @AndreaBozzo in https://github.com/mariocandela/beelzebub/pull/239
  • feat: Improve HTTP LLM Honeypot by @mariocandela in https://github.com/mariocandela/beelzebub/pull/241

New Contributors

  • @AndreaBozzo made their first contribution in https://github.com/mariocandela/beelzebub/pull/239

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.5.0...v3.6.0

v3.5.0 New feature
Notable features
  • Input/output guardrails for LLM integration
Full changelog

What's Changed

  • Build(deps): Bump golang.org/x/term from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/231
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.41.1 to 0.42.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/233
  • 229-Feat-Implement-Input/Output-Guardrails-for-LLM-Integration by @gianfrancodemarco in https://github.com/mariocandela/beelzebub/pull/230

New Contributors

  • @gianfrancodemarco made their first contribution in https://github.com/mariocandela/beelzebub/pull/230 🥇

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.4.3...v3.5.0

v3.4.3 Maintenance

Establishing collaborative global threat intelligence community with distributed honeypot network.

Full changelog

🚨 Global Threat Intelligence Community

Our mission is to establish a collaborative ecosystem of security researchers and white hat professionals worldwide, dedicated to creating a distributed honeypot network that identifies emerging malware, discovers zero-day vulnerabilities, and neutralizes active botnets.

For a comprehensive overview of our distributed threat intelligence framework and community vision, please refer to our white paper:

The white paper includes information on how to join our Discord community and contribute to the global threat intelligence network.

What's Changed

  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.39.1 to 0.40.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/224
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.40.0 to 0.41.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/226
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.41.0 to 0.41.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/228

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.4.2...v3.4.3

v3.4.2 New feature
Notable features
  • MCP Trust Score
  • Improved integration test coverage for TLS honeypot
Full changelog

What's Changed

  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.36.0 to 0.37.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/208
  • Build(deps): Bump golang.org/x/term from 0.33.0 to 0.34.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/209
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.37.0 to 0.38.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/212
  • Build(deps): Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/213
  • Build(deps): Bump github.com/jarcoal/httpmock from 1.4.0 to 1.4.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/211
  • Build(deps): Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/214
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.38.0 to 0.39.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/216
  • MCP Trust Score by @Matvey-Kuk in https://github.com/mariocandela/beelzebub/pull/210
  • Build(deps): Bump github.com/prometheus/client_golang from 1.23.0 to 1.23.1 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/217
  • Build(deps): Bump github.com/prometheus/client_golang from 1.23.1 to 1.23.2 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/218
  • Build(deps): Bump golang.org/x/term from 0.34.0 to 0.35.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/219
  • Feat: Improve integration test coverage for TLS honeypot. by @gzigurella in https://github.com/mariocandela/beelzebub/pull/220

New Contributors

  • @Matvey-Kuk made their first contribution in https://github.com/mariocandela/beelzebub/pull/210
  • @gzigurella made their first contribution in https://github.com/mariocandela/beelzebub/pull/220

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.4.1...v3.4.2

v3.4.1 Maintenance

Minor fixes and improvements.

Full changelog

What's Changed

  • Build(deps): Bump golang.org/x/term from 0.32.0 to 0.33.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/201
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.32.0 to 0.33.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/202
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.33.0 to 0.34.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/203
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.34.0 to 0.35.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/205
  • Build(deps): Bump github.com/mark3labs/mcp-go from 0.35.0 to 0.36.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/206
  • Build(deps): Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0 by @dependabot[bot] in https://github.com/mariocandela/beelzebub/pull/207

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.4.0...v3.4.1

v3.4.0 Security relevant
Security fixes
  • Added decoy MCP tools to detect and collect prompt injection attacks
Notable features
  • MCP honeypot tools for injection detection
  • Real-time attack prompt collection
Full changelog

What's Changed

Add and configure decoy MCP tools to detect prompt injection attacks against LLM agents. Collect attack prompts in real time and use them for guardrail fine-tuning.

  • Feat: add MCP honeypot support by @mariocandela in https://github.com/mariocandela/beelzebub/pull/199

Full Changelog: https://github.com/mariocandela/beelzebub/compare/v3.3.14...v3.4.0

Beta — feedback welcome: [email protected]