69,259 visible repositories in the index
25–48 of 50 · Most stars
Krawl is a customizable, lightweight, cloud-native web deception server and anti-crawler that creates fake web applications with low-hanging vulnerabilities using realistic, randomly generated decoy data and AI-generated HTML templates.
A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.
honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
A tool for deploying and detecting use of Active Directory honeytokens
OWASP Honeypot, Automated Deception Framework.
YakTrace reveals when multiple Yik Yak posts were made by the same anonymous account and organizes them into a local PDF dossier. Built on the sidechat.js API project.
Credentials catching honeypot
openssh on musl accepted any 257+ char password for accounts with no password. since 2016. check.sh, poc, patch.
Delphi debug framework
Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features
Scan your computer for applications that are either susceptible to dylib hijacking or have been hijacked.
Add a layer of active defense to your cloud applications.
Security and Hacking Tools, Exploits, Proof of Concepts, Shellcodes, Scripts.
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
Distributed Honeypot
Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.
Proof of concept denial of service over TOR stress test tool
WebLogic Honeypot is a low interaction honeypot to detect CVE-2017-10271 in the Oracle WebLogic Server component of Oracle Fusion Middleware. This is a Remote Code Execution vulnerability.
DICOM Honeypot
Express honeypot for RFI and LFI bots: 310 fake vulnerable URLs, logs IP, geolocation and payloads. Docker bait server or app.use() middleware.
MICROS Honeypot is a low interaction honeypot to detect CVE-2018-2636 in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (MICROS). This is a directory traversal vulnerability.
Naive Proof of Concept Crypter for GNU/Linux ELF64
HTTP honeypot on autopilot