Library / sourced records

Resource library

Search by kind, technique, environment or critical-reading notes. Each record states its source and what material was reviewed.

770published resources

Results

6 found
Open software—

bap

Material reviewed: Repository documentation

Web honeypot that responds to HEAD and GET requests with an HTTP Basic challenge and logs received credentials; it accepts no username or password.

ApplicationIdentityHoneypot
Open software—

Beeswarm

Material reviewed: Repository documentation

A honeypot project (now outdated) that deploys decoy clients and services to detect compromise via traffic discrepancies and honeytoken credential reuse.

NetworkIdentityHoneypotHoneytoken
Open software—

Canarytokens

Material reviewed: Repository metadataCritical reading

Open project for creating decoy tokens that alert when someone uses them.

IdentityCloudHoneytoken
Open software—

honeybits

Material reviewed: Repository documentation

Proof-of-concept tool that places breadcrumbs and decoys, such as fake files and credentials, on servers and workstations to draw attackers toward traps. It is not presented as a honeypot itself.

EndpointIdentityHoneytokenDecoy
Open software—

Honeybits-win

Material reviewed: Repository documentation

A Windows tool that creates breadcrumbs and honeytokens, such as fake credentials in Windows Credential Manager, to lead attackers toward honeypots.

EndpointIdentityHoneytokenDecoy
Open software—

honeypot (tomwillfixit)

Material reviewed: Repository documentation

A Ubuntu-based Docker image that sets up an SSH honeypot, logging usernames and passwords used by attackers during login attempts, based on code and instructions from an external tutorial.

NetworkIdentityHoneypot

Each record shows the source reviewed. Vendor claims and independent results are labeled separately.