honeypot-tarpits

What problem does it solve?

This Skill provides methods for detecting malicious scanning and probing activities without requiring complex security infrastructure.

Core Features & Use Cases

• Fake admin paths: Serve decoy admin URLs that log attacker activity.
• Decoy .env and config files: Detect probes attempting to find sensitive configurations.
• Canary tokens: Place embedded credentials or URLs that fire alerts when used or accessed.
• Fake API keys in JS: Embedding fake secrets in web bundles to identify scraping.
• Tarpits: Respond with delays to sluggishly impede scanners.
• Use Case: Deploy honeypots on a small website to identify automated attack attempts and reduce false positives in security monitoring.

Quick Start

Add fake admin paths to your web server configuration and set up logging and alerting to monitor for hits.