IfritProxy

🔥 AI-Powered Threat Deception & Intelligence Platform Turn attackers into intelligence sources with adaptive honeypot responses 📦 Quick Start • ✨ Features • 🔄 How It Works • 📚 Docs • 🔌 API Brought to the community by 🎯 What is IFRIT? IFRIT is an intelligent reverse proxy that sits between the...

One breach, please, and make no mistakes

For some time now, the cybersecurity community has seen examples of autonomous agents, built inside AI labs, attacking public infrastructure to name a few, Hugging Face, DSEWiki, and RubyGems. Of course, frontier labs have built-in security to prevent these attacks from occurring, but every now a...

wraithwall-toolkit

WraithWall Open-Source Toolkit Четыре инструмента для deception-инжиниринга, извлечённые из production-платформы безопасности, которая обрабатывает живой интернет-трафик, очищенные от всех продуктовых/секретных связей и выпущенные под MIT. Это не лабораторная демонстрация. Каждый инструмент — час...

Certiception

Certiception Certiception est un honeypot pour les services de certificats Active Directory ADCS , conçu pour piéger les attaquants avec un appât réaliste et attrayant qui déclenche des alertes très pertinentes. Développé par la Red Team de SRLabs, Certiception crée un modèle de certificat à...

UninstalledAppCanary

Uninstalled App Canary Travaux antérieurs Ce travail s'appuie sur les travaux d'ingénierie de déception autour des canaris de services Windows https://research.nccgroup.com/2021/03/04/deception-engineering-exploring-the-use-of-windows-service-canaries-against-ransomware/ Thèse Certains acteurs de...

CVE-2023-38873-G1

🚨 G1 = A05:2021 – Неправильная конфигурация безопасности ClickJacking ⚠️ Базовая оценка: 6.5 СРЕДНИЙ Шкала: CVSS ⚠️ 📌 Описание Этот репозиторий демонстрирует уязвимость безопасности типа Clickjacking , присутствующую на сайте G1. Уязвимость позволяет злоумышленнику загружать сайт внутри iframe ,...

CVE-2026-1661

The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthenticated users to inject styled content and links, for example through a public contact form, that can deceive an...

AgentTrap: Stateful Feedback Deception against Autonomous Penetration Testing Agents

Autonomous penetration testing agents conduct multi-step attacks by continuously adapting their plans and actions to target responses. As a common defense, honeypots can be deployed to divert these agents from real assets by presenting decoy services, while also supporting attack tracing and acti...

The Fine Art of Frustrating the Adversary

For Cybersecurity Awareness Month, eight Cisco Talos researchers share practical ways defenders can frustrate adversaries at different stages of an operation. Deception techniques such as honeypot accounts, false infrastructure, and tarpits can slow adversaries down while giving defenders earlier...

cve-exploit-lookup-api

CVE & Exploit Lookup API A unified Flask RESTful API servic...

Protocol Integration of Physical Layer Deception into EAP-TEAP Wi-Fi Authentication

Credential-based Extensible Authentication Protocol EAP authentication cannot distinguish a legitimate credential holder from an adversary using compromised credentials. Physical Layer Deception PLD complements credential-based authentication by exposing a deceptive primary object over a primary...

OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions

OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence AI model that was planned for an October launch, after it failed internal safety and alignment audits. The development was first reported by The Wall Street Journal. The move "marks a rare case of a...

DGF-Bench: A Benchmark for Simulating and Auditing Deception against Multi-Agent Governance Boards

Tool-using language-model agents can review enterprise projects as governance boards do: they read the evidence, apply written rules and decide whether the project may proceed. Part of that evidence comes from suppliers and project members with a stake in the decision. DGF-Bench is a benchmark in...

DecoyTrace: Toxic Decoys for Active Defense in Decentralized Federated Learning

Decentralized Federated Learning DFL eliminates the central aggregation server, reducing the single point of observation that traditional defenses against attacks rely on. As a result, peer-to-peer networks become exposed to malicious updates containing backdoors or semantic poisoning, since such...

Secure ISAC with Sensing Privacy under Eavesdropper Uncertainty

This paper investigates the joint protection of confidential data and legitimate-user directional information in integrated sensing and communication ISAC networks. We consider a multiuser downlink in which passive multi-antenna eavesdroppers Eves attempt to decode confidential signals while...

Astra Linux – Vulnerability in Firefox

Through a series of DOM manipulations, a message could be overlayed on top of another domain, where the attacker had control over the text but not over the HTML or formatting. This new domain would be displayed correctly in the address bar, potentially causing confusion among users. This...

Malicious code in chroma-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c415e6cd4e653006225dd54672dd79ef076166a2015fa33bbf8f10b789af55 The distribution installs a.pth file that Python auto-executes at interpreter startup on every process using the environment. The.pth file's executab...

Krawl v2.4.0

Krawl A modern, customizable web honeypot server designed to detect and track malicious activity from attackers and web crawlers through deceptive web pages, fake credentials, and canary tokens. Table of Contents Demo What is Krawl? Krawl Dashboard Deployment Modes Krawl Banlist Quickstart Docker...

The Deception Delta: Adversarial Evaluation of LLM-Based Smart Contract Bytecode Forensics

Large language models are increasingly used in blockchain forensic investigations to interpret unverified smart contract bytecode. Their robustness has not been systematically tested against contracts adversarially designed to mislead analysis. We evaluate 22 frontier models on 13 purpose-built...

HoneyWire hub/v2.1.0

HoneyWire 📋 Table of Contents Overview Showcase The Universal Event Standard Features Architecture Quick Start Guide Security Notes Tech Stack Roadmap & Development Versioning and API Reference Overview HoneyWire is a lightweight, Distributed High-Signal Security Early-Warning System Builder,...