安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functions.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Deception based detection techniques mapped to the MITRE’s ATT&CK framework
A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
Thumper is an open-source tripwire for the Shai-Hulud npm worm. Plant fake-but-realistic credentials where the worm scans - the instant one is read, you know the box might be breached. Free and built in the open by Jesta.
An awesome list of resources on deception-based security with honeypots and honeytokens
Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts
Add a layer of active defense to your cloud applications.
Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates the setup, rotation, and teardown of honeytokens and fake API endpoints, and uses eBPF to detect, log, and forward alerts when your traps have been accessed.
HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.
SneakPeeker is a tool for finding and removing Canary tokens.
Deceptive Operations: Lure, Observe, and Secure Tool
Behavioral User-driven Deceptive Activities Framework
Acra poison records example project: see how to prevent malicious SELECT * queries to your SQL database
An awesome list of resources on AI cyber deception, exploring adversarial machine learning techniques used to deceive and secure systems
Automatically generate decoy files.
Node.js SDK for bot detection and web scraping defense. Combines deterministic tripwire honeypots, local rate limiting and IP filtering rules, and JA3/JA4 TLS fingerprinting to catch stealth scrapers that beat browser fingerprinting. Framework middleware for Express, Fastify, and Next.js. TypeScript-first, fail-open.
Add a description, image, and links to the honeytoken topic page so that developers can more easily learn about it.
To associate your repository with the honeytoken topic, visit your repo's landing page and select "manage topics."