Beelzebub — The Cyber Toolchain

Beelzebub v3.10.0

Tue, 27 Oct 2026 12:55:36 GMT

Beelzebub v3.10.0 adds WordPress 6.9.4 and Ollama service lures to expand honeypot deception coverage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a WordPress 6.9.4 service lure to emulate a WordPress endpoint and attract attackers targeting the CMS.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an Ollama service lure to emulate a locally-hosted LLM API and capture probes targeting exposed Ollama instances. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.9.1

Mon, 31 Aug 2026 10:11:51 GMT

Beelzebub v3.9.1 adds method-aware HTTP routing to reduce honeypot fingerprinting. • Adds method-aware routing to the HTTP honeypot service to reduce fingerprinting by responding differently based on the HTTP method used by scanners. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.9.0

Wed, 05 Aug 2026 14:11:30 GMT

Beelzebub v3.9.0 adds boot-time background plugins, YAML-based plugin config, and shared JSON Schema validation for honeypot configs. • Migrates plugin declarations to YAML config, enabling declarative plugin management via configuration files. • Adds `ServicePlugin` support for background plugins that start automatically at boot time. • Adds shared JSON Schema validation for honeypot configurations, catching config errors before deployment. • Improves the installer experience. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.8.0

Tue, 02 Jun 2026 14:45:11 GMT

Beelzebub v3.8.0 captures raw client bytes in TCP trace events for binary protocol forensics. • Preserves raw client bytes in TCP trace events, enabling full capture of binary protocol payloads hitting honeypot listeners. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.7.3

Thu, 28 May 2026 09:42:39 GMT

Beelzebub v3.7.3 adds a `validate` flag to statically check honeypot configuration files before deployment. • Adds `validate` flag to statically check configuration files without starting the honeypot service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.7.2

Mon, 18 May 2026 07:23:30 GMT

Beelzebub v3.7.2 improves HTTP tracer fidelity and enhances the cloud plugin. • Improves HTTP tracer for richer attacker request capture and analysis. • Enhances cloud plugin capabilities for expanded honeypot deployment options. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.7.1

Thu, 30 Apr 2026 12:43:26 GMT

Beelzebub v3.7.1 adds real client address tracking and CLI improvements to the honeypot service. • Adds `realClientAddr` field to capture the true client IP address of honeypot connections. • Improves CLI interface for managing the honeypot service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.7.0

Tue, 28 Apr 2026 13:41:57 GMT

Beelzebub v3.7.0 introduces a brand-new plugin system for extending honeypot capabilities. • Adds a brand-new plugin system enabling extensible honeypot behavior through third-party or custom plugins. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.10

Sun, 26 Apr 2026 13:12:43 GMT

Beelzebub v3.6.10 adds interactive command matching and LLM integration to TCP honeypot strategy. • Enhances TCP honeypot strategy with interactive command matching, enabling dynamic response to attacker input over raw TCP connections. • Integrates LLM backend into TCP strategy, allowing AI-generated responses to attacker commands on TCP honeypots. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.9

Sun, 19 Apr 2026 18:08:00 GMT

Beelzebub v3.6.9 improves the maze honeypot plugin. • Enhances the maze plugin with unspecified capability improvements. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.8

Fri, 17 Apr 2026 10:31:59 GMT

Beelzebub v3.6.8 adds a beta maze plugin to trap and disorient attackers. • Adds beta maze plugin to create deceptive, labyrinthine environments that trap and slow down attackers exploring the honeypot. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.6

Mon, 09 Mar 2026 15:11:42 GMT

Beelzebub v3.6.6 adds environment variable overrides for configuration and lazy logging initialization. • Supports environment variables for overriding configuration values, enabling container-friendly and secrets-safe deployments. • Adds lazy logging initialization to defer logger setup until needed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.5

Sat, 28 Feb 2026 12:54:53 GMT

Beelzebub v3.6.5 adds IP-based rate limiting for the LLM honeypot plugin. • Adds IP-based rate limiting for the LLM plugin, capping how many AI-powered interactions any single source IP can trigger. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.4

Fri, 13 Feb 2026 13:54:27 GMT

Beelzebub v3.6.4 enables LLM-powered prompts on TELNET honeypot connections. • Enables LLM prompt support for TELNET honeypot sessions, allowing AI-generated interactive responses to attackers connecting via Telnet. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.3

Mon, 26 Jan 2026 07:06:19 GMT

Beelzebub v3.6.3 adds TELNET honeypot support with authentication. • Adds TELNET protocol honeypot support with authentication and command handling. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.6.0

Sun, 16 Nov 2025 17:54:01 GMT

Beelzebub v3.6.0 improves the cloud plugin and HTTP LLM honeypot capabilities. • Improves the cloud plugin for enhanced honeypot deployment. • Improves the HTTP LLM honeypot for more realistic attacker emulation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.4.2

Tue, 16 Sep 2025 10:00:35 GMT

Beelzebub v3.4.2 adds MCP Trust Score scoring to honeypot interactions. • Adds MCP Trust Score to evaluate and score Model Context Protocol interactions captured by the honeypot. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.4.0

Tue, 01 Jul 2025 21:15:47 GMT

Beelzebub v3.4.0 adds MCP honeypot support to detect prompt injection attacks against LLM agents. • New MCP honeypot service: deploy decoy Model Context Protocol tools to lure and capture prompt injection attempts targeting LLM agents. • Enables real-time collection of attack prompts for use in guardrail fine-tuning workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.11

Sun, 23 Mar 2025 18:33:30 GMT

Beelzebub v3.3.11 adds matched-command logging, regexp precompilation, HistoryStore TTL cleanup, and a memory-limit flag. • Logs which command pattern was matched for SSH and HTTP honeypot strategies, giving practitioners visibility into attacker inputs. • Precompiles regular expressions at config load time, surfacing misconfigured patterns at startup rather than silently at runtime. • Adds an automatic cleanup routine for HistoryStore with a default 1-hour TTL since last interaction, bounding memory growth from long-running honeypot sessions. • New `memLimitMiB` flag (default: 100 MiB) lets operators cap the process memory footprint at launch. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.10

Fri, 14 Mar 2025 06:51:47 GMT

Beelzebub v3.3.10 adds FallbackCommand support for HTTP honeypot strategies. • Adds `FallbackCommand` for the HTTP Strategy, enabling a configurable catch-all response when no other HTTP rule matches. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.9

Sun, 09 Mar 2025 12:46:26 GMT

Beelzebub v3.3.9 keeps SSH LLM honeypot sessions alive after an attacker logs out. • Preserves SSH LLM honeypot session state after an attacker logs out, enabling continuous observation across reconnections. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.8

Sun, 02 Mar 2025 04:33:38 GMT

Beelzebub v3.3.8 adds latest tag to continuous delivery pipeline • Adds support for a `latest` tag in the continuous delivery pipeline Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.7

Sat, 01 Mar 2025 11:33:53 GMT

Beelzebub v3.3.7 adds multi-platform Docker images and structured JSON serialization of HTTP headers in logs. • Adds multi-platform Docker image support, enabling deployment on non-amd64 architectures. • HTTP request headers are now serialized as structured JSON in log output, improving log parsing and SIEM ingestion. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.5

Tue, 18 Feb 2025 09:24:05 GMT

Beelzebub v3.3.5 refactors the LLM Plugin with a new declarative YAML API supporting OpenAI and Ollama providers. • New declarative `plugin:` block in honeypot YAML config lets you specify `llmProvider` (openai or ollama), `llmModel`, and `openAISecretKey` directly per-service. • Supports Ollama as an LLM backend alongside OpenAI, enabling self-hosted, air-gapped LLM-powered honeypots. Breaking changes: • The LLM Plugin API has been refactored; existing honeypot configs using the prior LLM plugin configuration format must be updated to the new `plugin:` block structure with `llmProvider`, `llmModel`, and `openAISecretKey` fields. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.3

Thu, 13 Feb 2025 19:59:20 GMT

Beelzebub v3.3.3 adds TLS support for HTTP honeypot listeners. • Supports TLS-based HTTPS connections for HTTP honeypot services. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.1

Thu, 16 Jan 2025 07:47:12 GMT

Beelzebub v3.3.1 adds support for custom prompts in the LLM honeypot plugin. • Supports custom prompts in the LLM honeypot plugin, enabling tailored AI-driven deception personas per honeypot service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.3.0

Tue, 14 Jan 2025 07:48:13 GMT

Beelzebub v3.3.0 lets LLM honeypots use custom prompts for tailored attacker deception. • Supports custom prompts for LLM-powered honeypots, enabling operators to tailor AI-generated responses to specific attacker personas or environments. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.2.5

Sat, 07 Sep 2024 10:56:01 GMT

Beelzebub v3.2.5 adds support for handling SSH inline commands in its honeypot service. • Supports SSH inline command handling, enabling the honeypot to capture and respond to commands passed directly via SSH (e.g., `ssh user@host `) rather than only interactive sessions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.2.4

Fri, 30 Aug 2024 06:31:38 GMT

Beelzebub v3.2.4 adds source IP and port logging and multi-architecture container support. • Supports multi-architecture container builds, enabling deployment on ARM and other non-amd64 hosts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.2.3

Wed, 07 Aug 2024 05:54:59 GMT

Beelzebub v3.2.3 adds cloud integrations for the honeypot service. • Adds cloud integrations support to connect Beelzebub honeypot deployments with cloud platforms. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.2.2

Sun, 21 Jul 2024 18:28:31 GMT

Beelzebub v3.2.2 adds Llama3/Ollama support for locally-hosted AI-powered honeypot deception. • Supports Llama3 via Ollama as a local LLM backend for AI-driven honeypot responses, enabling on-premises deception without external API dependencies. Breaking changes: • The YAML service interface has been refactored — existing service configuration files may require updates to match the new structure. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.2.1

Sun, 23 Jun 2024 14:01:48 GMT

Improves LMM SSH honeypot in Beelzebub v3.2.1 • Improve LMM SSH Honeypot Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.2.0

Sun, 23 Jun 2024 09:05:29 GMT

Beelzebub v3.2.0 adds an LMM Honeypot HTTP Server to detect liquidity pool manipulation attacks • Adds `LMM` honeypot type with HTTP server capabilities to simulate and trap Liquidity Pool Manipulation (LMM) attackers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.1.11

Wed, 03 Apr 2024 06:23:28 GMT

Beelzebub v3.1.11 adds configurable model and prompt settings to the OpenAI plugin. • Adds `model` and `prompt` configuration fields to the OpenAI plugin to allow custom LLM selection and system prompts Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.1.8

Tue, 05 Mar 2024 08:23:53 GMT

Adds the Beelzebub cloud tracer plugin • feat: Beelzebub cloud tracer plugin Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v3.0.0

Wed, 30 Aug 2023 21:15:41 GMT

Adds a non-blocking tracer architecture in v3.0.0 • Introduces a `non-blocking tracer` to handle tracing operations asynchronously Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v2.1.1

Wed, 17 May 2023 09:53:22 GMT

Beelzebub v2.1.1 adds command output tracing for the SSH strategy. • Enables tracing of command output for the SSH strategy • Bumps github.com/prometheus/client_golang from 1.14.0 to 1.15.0 • Bumps github.com/prometheus/client_golang from 1.15.0 to 1.15.1 • Bumps github.com/rabbitmq/amqp091-go from 1.8.0 to 1.8.1 • Bumps golang.org/x/crypto from 0.8.0 to 0.9.0 • Bumps github.com/sirupsen/logrus from 1.9.0 to 1.9.1 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v2.1.0

Thu, 13 Apr 2023 19:17:18 GMT

Adds Prometheus metrics configuration to Beelzebub v2.1.0 • Supports Prometheus metrics via a new configuration option. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub

Beelzebub v1.1.0

Sun, 18 Dec 2022 17:27:46 GMT

Adds ChatBot GPT-3 integration • Adds ChatBot GPT-3 integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/beelzebub