# drk1wi/Portspoof

Portspoof

Repository: https://github.com/drk1wi/Portspoof
Canonical: https://ross.abutalabs.com/products/portspoof
Homepage: http://drk1wi.github.io/portspoof/
Language: C++
License: GPL-3.0
License Family: copyleft
Last push: 2026-08-26T08:31:40+00:00

## Health v2 (maintenance only)
Score: 85/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 58, longevity 100
- inputs: {"age_days": 5150, "days_push": 7, "days_rel": 203, "gap_med": 58, "n_releases_24m": 2}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2427, forks 179 (observed 2026-08-28T04:06:50.892887+00:00)

## What it is
Portspoof is a lightweight C++ tool that emulates open TCP ports and convincing service signatures across all 65535 ports, making port scanning and service fingerprinting slow and unreliable for attackers. It runs in userland, binds to a single port, and can also act as an exploitation framework frontend against attacker scanning tools.

## Use cases
- hide real services from nmap scans
- make port scanning slow and costly for attackers
- confuse service version detection with fake banners
- deceive attackers during reconnaissance
- protect a server's real attack surface from enumeration

## When to choose
- you want to obscure which TCP ports actually host real services
- you need a lightweight, userland deception layer without root privileges
- you want to slow down or frustrate automated reconnaissance against a host

## When to avoid
- you need a full honeypot with logging and attacker interaction analysis
- you require per-service emulation of real application protocols
- your environment cannot tolerate iptables rules or altered network responses

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, networking, simulation
- domain: security, networking, penetration-testing
- platform: cli
- tags: port-scanning-defense, honeypot, deception, service-emulation, reconnaissance, linux

## Member repositories
- drk1wi/Portspoof (main) score 85

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:50.892887+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:31:35.599061+00:00, confidence not recorded.
  - readme: https://github.com/drk1wi/Portspoof (fetched 2026-08-28T04:06:50.892887+00:00, sha 0661ed47f098)
- Data as of 2026-08-30T08:39:29.467469+00:00.