ADBHoney review

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

ADBHoney is an open-source, low-interaction honeypot for observing attackers targeting exposed Android Debug Bridge services over TCP/IP. Its endpoint decoy scope makes it a focused option for security researchers and defenders who operate their own sensors, especially around ADB services exposed on port 5555. The product emulates ADB access, accepts adb connect connections, handles file uploads through adb push, and supports shell commands through adb shell.

Its main strength is the depth of its ADB-specific interaction model. ADBHoney redirects activity to stdout, saves uploaded files to disk, and provides visibility into both commands and transferred content. That gives defenders a direct way to observe activity aimed at an exposed ADB service rather than relying only on connection attempts. The narrow focus is also the key trade-off: it is designed around Android Debug Bridge deception, so it is better suited to targeted research and monitoring than to a broad honeypot program covering multiple protocols or endpoint types.

Deployment remains flexible for a self-hosted tool. ADBHoney can run directly with Python 3 or through Docker and Docker Compose, allowing teams to choose between a direct runtime and container-based operation. The published capabilities emphasize local sensor operation, stdout activity, and files saved to disk. Organizations seeking a managed cloud service, a wider integration layer, or deception beyond ADB should choose another product. ADBHoney fits teams that want an open-source, specialized ADB sensor and are prepared to manage its deployment and collected artifacts themselves.

ADBHoney pros and cons

• Where it wins
  • Emulates ADB over TCP/IP and accepts adb connect connections
  • Captures adb push uploads and adb shell commands
  • Runs with Python 3, Docker, or Docker Compose
• Where it doesn't
  • Focused specifically on ADB rather than broader endpoint deception
  • Self-hosted deployment requires operating your own sensor
  • No listed integrations or broader platform metadata

ADBHoney fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update