Krawl

Krawl Современный настраиваемый веб-ханипот-сервер, предназначенный для обнаружения и отслеживания вредоносной активности атакующих и веб-краулеров с помощью обманных веб-страниц, поддельных учётных данных и canary-токенов. Содержание Демо Что такое Krawl? Панель управления Krawl Режимы...

SnitchDNS

!CAUTION Этот репозиторий больше не поддерживается, посетите https://github.com/sadreck/SnitchDNS для последней версии. SnitchDNS SnitchDNS — это DNS-сервер на основе базы данных с веб-интерфейсом, написанный на Python и Twisted, который упрощает администрирование DNS: все изменения конфигурации...

coalmine

클라우드 카나리 토큰 관리 — AWS와 GCP에 걸쳐 가짜 자격증명을 배포, 모니터링, 교체하여 무단 접근을 탐지합니다. !WARNING 알파 버전 — Coalmine은 초기 개발 단계입니다. 기본 기능이 현재 우선순위이며, 애플리케이션은 프로덕션 사용을 위해 완전한 보안 테스트를 거친 것으로 간주되어서는 안 됩니다. 상태 기능| 개발 중 불안정| 할 일 ---|---|--- AWS IAM User Canaries| GCP Service Account Canaries| Azure 지원 AWS S3 Bucket Canaries|...

LogMePwn

LogMePwn LogMePwn — это полностью автоматизированный, мультипротокольный, надежный, сверхбыстрый инструмент для сканирования и проверки уязвимости Log4J RCE CVE-2021-44228. Особенности инструмента Встроенная поддержка автоматической генерации Canary Tokens с помощью электронной почты или вебхуков...

Leaktopus

Уведомление о прекращении поддержки Уважаемые пользователи Leaktopus, Сообщаем вам, что проект Leaktopus будет официально прекращён. После тщательной оценки мы приняли решение прекратить активную разработку и поддержку этой библиотеки. Что это значит для вас? Новых функций или обновлений не будет...

prompt_injection

Cross-Surface 프롬프트 인젝션 벤치마크 도구를 사용하는 LLM 에이전트의 실행 파이프라인에서 프롬프트 인젝션 방어가 어느 지점에서 작동하고 어느 지점에서 작동하지 않는지를 측정하기 위한 벤치마크입니다. 주입된 페이로드에 고유한 카나리 토큰SECRET-A-F0-98을 삽입하고 네 가지 파이프라인 단계에서 이를 추적합니다: 노출 → 지속 → 릴레이 → 실행. 이를 통해 모델이 보는 것과 모델이 실제로 행동하는 것을 분리하여 방어 실패를 특정 파이프라인 단계로 국소화합니다. 📄 arXiv:2603.28013 · 🤗 논문...

Krawl v2.4.0

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

Krawl v2.3.0

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

Identifying AI Web Scrapers Using Canary Tokens

From pre-training to query-time augmentation, web-scraped data helps to improve the quality and contextual relevancy of content generated by large language models LLMs. However, large-scale web scraping to feed LLMs can affect site stability and raise legal, privacy, or ethics concerns. If websit...

Key Takeaways from the Take Command Summit 2025: Outpacing the Adversary – Red Teaming in a Complex Threat Landscape

The evolving complexity of modern infrastructures calls for more than traditional pen testing. In this session from the Take Command 2025 Virtual Cybersecurity Summit, red team experts shared how organizations are using continuous testing to outpace attackers — and better prepare their teams to...

CanaryTokenScanner - Script Designed To Proactively Identify Canary Tokens Within Microsoft Office Documents And Acrobat Reader PDF (docx, xlsx, pptx, pdf)

Detecting Canary Tokens and Suspicious URLs inMicrosoft Office, Acrobat Reader PDF and Zip Files Introduction In the dynamic realm of cybersecurity, vigilance and proactive defense are key. Malicious actors often leverage Microsoft Office files and Zip archives, embedding covert URLs or macros to...

Researchers Uncover New Iranian Hacking Campaign Targeting Turkish Users

Details have emerged about a previously undocumented malware campaign undertaken by the Iranian MuddyWater advanced persistent threat APT group targeting Turkish private organizations and governmental institutions. "This campaign utilizes malicious PDFs, XLS files and Windows executables to deplo...

Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

LogMePwn LogMePwn is a fully automated, multi-protocol, reliab...

SnitchDNS - Database Driven DNS Server With A Web UI

SnitchDNS is a database driven DNS Server with a Web UI, written in Python and Twisted, that makes DNS administration easier with all configuration changed applied instantly without restarting any system services. One of its main features is the logging of all DNS queries allowing the discovery o...