PalisadeResearch/llm-honeypot

Blacksea is an active honeypot and canary-bait control system built to detect and drown LLM-driven attackers. Blacksea doesn't stop at watching LLM attacks. It exploits flaws in the attacker's LLM judgment to gain arbitrary code execution on their machines, collect intel passive defenses can't reach, and make sure they don't come back.

LLM-first deception framework: "The honeypot that talks back!™"

Helping Ethical Hackers use LLMs in 50 Lines of Code or less..

Cowrie SSH/Telnet Honeypot https://docs.cowrie.org/

the LLM vulnerability scanner

Modern honeypot supporting multiple services, realistic website cloning, and AI-powered features

19 Customizable honeypots for monitoring network traffic, bots activities and username\password credentials (DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap)

"Never send a human to do a machine's job" - Open Source AI hacking agent

[NeurIPS 2024] Official implementation for "AgentPoison: Red-teaming LLM Agents via Memory or Knowledge Base Backdoor Poisoning"