HoneypotBuster

专为红队设计的 Microsoft PowerShell 模块，可用于在网络或主机上发现蜜罐和蜜令牌。 CodeExecution 使用 Import-Module 在目标机器上执行代码。 Invoke-HoneypotBuster HoneypotBuster 是一款旨在识别常见分布式欺骗厂商使用的蜜令牌、蜜面包屑和蜜罐的工具。该工具可帮助识别以下欺骗技术： 1. Kerberoasting 服务账户蜜令牌 正如 Sean Metcalf 在 ADSecurity 文章中所描述的，这种技术诱使攻击者扫描具有 SPN（服务主体名称）且 adminCount = 1 LDAP...

honeyScore

honeyScore 使用Shodan CLI扫描IP地址列表以检测蜜罐 安装 git clone https://github.com/Skotizo/honeyScore cd honeyScore chmod +x install.sh ./install.sh 使用 ./honeyScore ipList.txt ./honeyScore ipList.txt results.txt 输出...

honeypotscan

支持开发 如果本项目对您的工作有帮助，请支持持续维护和新功能开发。 ETH 捐赠钱包 0x11282eE5726B3370c8B480e321b3B2aA13686582 扫描二维码或复制上方钱包地址。 🛡️ 蜜罐扫描器 HoneypotScan 购买前检查代币是否为骗局 免费、快速且精准的以太坊、Polygon 和 Arbitrum 智能合约蜜罐检测工具。 🍯 什么是蜜罐代币？ 我们捕捉蜜罐。 蜜罐代币是一种旨在窃取您资金的恶意智能合约。它允许您自由买入代币，但当你试图卖出时——交易会失败。您的资金将被永远困住。 蜜罐的工作原理 骗子将隐藏逻辑嵌入代币的智能合约代码中： 卖出拦截器 ——...

strafer

Strafer Elasticsearch 感染正呈指数级增长。攻击者利用开放和暴露的 Elasticsearch 接口在云和非云部署中触发感染。在此次演讲中，我们将发布一款名为 "STRAFER" 的工具，用于检测 Elasticsearch 实例中的潜在感染。该工具允许安全研究人员、渗透测试人员和威胁情报专家检测运行恶意代码的已受损和已感染 Elasticsearch 实例。该工具还使您能够针对以云数据库为目标的恶意软件进行高效研究。在此版本的工具中，支持以下模块： Elasticsearch 实例信息收集与侦察 Elasticsearch 实例在互联网上的暴露情况 检测...

crx-scouter

crx-scouter.js 基于前端指纹可以探测到我们正在使用哪些 Chrome 插件扩展，可以检测电脑那端的人是帅气的大黑客还是高端的程序员🐱，被用于蜜罐、人机识别、用户画像、广告屏蔽对抗、插件漏洞利用的前置检查等场景: Chrome的安全设计在这五年间有了新的变化，Google视乎想解决这个问题，但是收效甚微，2021年对Chrome相关特性的分析可以阅读 《点我的链接我就能知道你用了哪些 chrome 插件 - IN 2021》 📚 检测原理可参考我们2016年的文章，他有一个符合乌云时代的名字: 《点我的链接我就能知道你用了哪些 chrome 插件》 ✨ |・ω・｀ 在线检测地...

honeypot-auditor

.. :: H-AUDITOR :: v1.0.3 :: "MARCANDO... PORTADORA DETECTADA" :: --- "¿warez? no. cabeceras. intercambiamos banners, no bins." "si responde a cualquier contraseña, no es producción — es un señuelo." "respeta al sysop. sondea solo lo que posees. no dejes ningún STOR atrás." Does This Look Like An...

CVE-2025-14208

creationtimestamp| type| source ---|---|--- 2026-09-08 10:00:03+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-09-07 2026-09-08 11:00:34+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/12253a70-6b5a-44ad-b30d-9849e4011cb8 2026-09-09...

Exploit for CVE-2014-8361

Vuln Scanner - Advanced Network Security Scanner !Licenseht...

EUVD-2000-1125

Malware in sbrugna...

EUVD-2000-1127

Malware in sbrugna...

EUVD-2000-1126

Malware in sbrugna...

Pwndora - Massive IPv4 Scanner, Find And Analyze Internet-Connected Devices In Minutes, Create Your Own IoT Search Engine At Home

Pwndora is a massive and fast IPv4 address range scanner, integrated with multi-threading. Using sockets, it analyzes which ports are open, and collects more information about targets, each result is stored in Elasticsearch. You can integrate with Kibana to be able to visualize and manipulate dat...

Wprecon - A Vulnerability Recognition Tool In CMS Wordpress, 100% Developed In Go

Hello! Welcome. Wprecon Wordpress Recon, is a vulnerability recognition tool in CMS Wordpress, 100% developed in Go. Notice: Why is the project out of updates these days ?! What happens is that I am doing the vulnerability scanner. Branch Dev Compile and Install Features Random Agent Detection WA...

Sifter - A OSINT, Recon And Vulnerability Scanner

Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit...

ReconDog v2.0 - Reconnaissance Swiss Army Knife

Reconnaissance Swiss Army Knife Main Features Wizard + CLA interface Can extracts targets from STDIN piped input and act upon them All the information is extracted with APIs, no direct contact is made to the target Utilities Censys: Uses censys.io to gather massive amount of information about an ...

Shodan Honeyscore Client

This module uses the shodan API to check if a server is a honeypot or not. The api returns a score from 0.0 to 1.0. 1.0 being a honeypot. A shodan API key is needed for this module to work properly. If you don't have an account, go here to register: https://account.shodan.io/register For more inf...

CVE-2000-1141

Recourse ManTrap 1.6 modifies the kernel so that ".." does not appear in the /proc listing, which allows attackers to determine that they are in a honeypot system...

CVE-2000-1140

Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem...

CVE-2000-1143: Undefined Security Weakness

Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system...

CVE-2000-1140: Undefined Security Weakness

Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they are in a honeypot system by comparing the results from kill commands with the process listing in the /proc filesystem...