skills.rest
PP-Namias
PP-NamiasCOMMUNITY
Explore all skills by this author →
Website𝕏@PP_NamiasGitHub

canary-token-system

Monitor planted canary tokens and notify when security scanners trigger them.

2|Updated Apr 9, 2025
Search Tags:#security#penetration testing#intrusion detection#canary token#security alerting
One-click install
npx skills add https://github.com/PP-Namias/Portfolio --skill canary-token-system
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: canary-token-system
Source: https://github.com/PP-Namias/Portfolio/tree/main/.agents/skills/canary-token-system
Command: npx skills add https://github.com/PP-Namias/Portfolio --skill canary-token-system

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a mechanism for detecting automated security scanners and penetration testing tools through a canary token honeypot system.

Core Features & Use Cases

  • Canary Token Management: Facilitates the management of canary tokens to detect when security scanners interact with them.
  • Customizable Notifications: Configures notifications upon detection of a canary token use for immediate alerting.
  • Use Case: Utilize this Skill to quickly identify and respond to security scanner attempts, thereby strengthening the system's defenses against potential breaches.

Quick Start

To set up a canary token system, execute the following commands:

  • add-token "new_canary_token" "/expected/path"
  • `configure-notification channel="Slack" webhook="your_slack_webhook"

Frequently Asked Questions about canary-token-system

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect automated security scanners probing my application paths?▼

Detect automated security scanners by planting a canary token in a defined path. This honeypot system monitors the token and triggers an alert when an unauthorized security scan interacts with it.

What is a canary token and how does it work for intrusion detection?▼

A canary token is a planted honeypot trigger placed in a specific route path. When a security scanner accesses it, custom validation logic identifies the intrusion attempt and sends an immediate alert.

How do I set up a canary token system for security alerting?▼

Set up a canary token system by executing the add-token command with your new token and expected path, then use configure-notification to define an alerting channel like a Slack webhook for immediate detection alerts.

Can I configure Slack notifications for detected canary tokens?▼

Yes, configure Slack notifications for detected canary tokens by using the configure-notification command with your channel set to Slack and providing your specific Slack webhook URL for immediate security alerting.

Does this canary token system require custom route handling for penetration testing identification?▼

Yes, identifying unauthorized security scans with canary tokens requires custom route handling and validation logic. This setup ensures the system accurately detects when penetration testing tools interact with the planted token.

Related Skills

Explore More Software Engineering Skills→
symbiosikasymbiosika

backend-app

Implement backend APIs and routing with the symbiosika-framework.

Official
Advanced
kngender5kngender5

security-monitor

Monitor WSL2 and Windows environments for intrusions and security threats.

Community
Advanced
DCx7C5DCx7C5

canarytoken-SKILL.md

Deploy and manage Canary Tokens via the Thinkst Canary API.

Community
Advanced
benchflow-aibenchflow-ai
317

suricata-rules-basics

Construct Suricata network intrusion detection signatures with sticky buffers and DPI logic.

Official
Intermediate