Honeypots and deception
Honeypots and adversary engagement
Honeypots 19
- Beelzebubgithub.com
- Beelzebub API v1 - Beelzebubdocs.beelzebub.cloud
- Galah: LLM-powered web honeypot. Wasting attgithub.com
- Andrew Morris on GreyNoise Swarm sensors that can be compromised to capture attacker toolingx.com
- Blacksea - active honeypot and canary-bait system to detect and counter LLM-driven attackersgithub.com
- Certiception - an ADCS honeypot to catch attackers in your internal networkgithub.com
- Defused - honeypots and deception as a managed servicedocs.defusedcyber.com
- Design and Development of an Intelligent LLM-based LDAP Honeypotarxiv.org
- GreyNoise Project Swarm - community deception sensor networkgreynoise.io
- GreyNoise Project Swarm - community-contributed deception sensor networkdocs.greynoise.io
- Honeyman - mobile multi-vector threat sensor with honeypotsgithub.com
- HoneyWire - open-source deception and canary platformgithub.com
- Introducing HASH: The HTTP Agnostic Software Honeypot frameworksecuritylabs.datadoghq.com
- Lenny Zeltser: Build a Decoy MCP Server to Catch AI Agent Attackersx.com
- PhantomFS - Windows virtual honeypot file system with decoy files and alertsgithub.com
- SBASH: a Framework for Designing and Evaluating RAG vs. Prompt-Tuned LLM Honeypotsarxiv.org
- Sparkle - LLM honeypot for security researchgithub.com
- The Man Who Tried to Get Hacked at DEF CON - Tib3rius on the Honeyman honeypot projectyoutube.com
- Thinkst Canarytokens - MCP server token to detect agentic attackersblog.thinkst.com
Deception and watchboards 10
- OpenClaw Exposure Watchboardopenclaw.allegro.earth
- Cloned Website Token and Reverse Proxiesblog.thinkst.com
- Context Bombs: Stopping AI Attackers in Their Tracksagentic.tracebit.com
- honeyslop - code canaries to triage hallucinated slop vulnerability reportsgithub.com
- Illusive is Now Proofpoint Identity Threat Defenseproofpoint.com
- It's Baaack - Credit Card Canarytokens are now on your Consolesblog.thinkst.com
- It's Not Paranoia If They're Really After You: When Announcing Deception Technology Can Change Attacker Decisionsscholarspace.manoa.hawaii.edu
- Perimeter Sensors - believable canary services on your own domain bound to canary credentialstracebit.com
- Rob Fuller uses Log4shell canaries in passwords to track credential usex.com
- trappsec - business logic deception framework with decoy routes and honey fieldstrappsec.dev