安全、快捷、高交互、企业级的蜜罐管理系统，护网；支持多种协议蜜罐、蜜签、诱饵等功能。A safe, fast, highly interactive and enterprise level honeypot management system, supports multiple protocol honeypots, honeytokens, baits and other functions.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Deception based detection techniques mapped to the MITRE’s ATT&CK framework
A PoC tool designed to enhance the effectiveness of your traps by spreading breadcrumbs & honeytokens across your systems to lure the attacker toward your honeypots
An awesome list of resources on deception-based security with honeypots and honeytokens
Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts
HoneyWire: The Open-Source, Unlimited Deception Platform. Turn any Linux machine into an enterprise-grade canary in 60 seconds.
Add a layer of active defense to your cloud applications.
Koney is a Kubernetes operator that enables you to define so-called deception policies for your cluster. Koney automates the setup, rotation, and teardown of honeytokens and fake API endpoints, and uses eBPF to detect, log, and forward alerts when your traps have been accessed.
SneakPeeker is a tool for finding and removing Canary tokens.
Deceptive Operations: Lure, Observe, and Secure Tool
the honeypot solo devs can run and maintain
Behavioral User-driven Deceptive Activities Framework
Acra poison records example project: see how to prevent malicious SELECT * queries to your SQL database
An awesome list of resources on AI cyber deception, exploring adversarial machine learning techniques used to deceive and secure systems
Deploy decoy AWS IAM identities and catch attacker reconnaissance in seconds. Honeytoken framework with a live dashboard, MITRE ATT&CK journey mapping, and multi-platform mesh (AWS + GitHub + Okta).
Node.js SDK for bot detection and web scraping defense. Combines deterministic tripwire honeypots, local rate limiting and IP filtering rules, and JA3/JA4 TLS fingerprinting to catch stealth scrapers that beat browser fingerprinting. Framework middleware for Express, Fastify, and Next.js. TypeScript-first, fail-open.
To associate your repository with the honeytoken topic, visit your repo's landing page and select "manage topics."