DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!
☆292Aug 27, 2026Updated last week
Alternatives and similar repositories for DECEIVE
Users that are interested in DECEIVE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Galah: An LLM-powered web honeypot.☆663Jul 24, 2025Updated last year
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated 2 years ago
- Interactive, dynamic, and realistic LLM honeypots☆80Feb 18, 2025Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 2 months ago
- Sandbox samples and monitor them with kunai☆29Jul 21, 2026Updated last month
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆339Updated this week
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆32Jan 30, 2025Updated last year
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,983Updated this week
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Oct 9, 2024Updated last year
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Framework for Monitoring File Ingestion Source for Yara Matches☆52Mar 10, 2025Updated last year
- ☆793May 7, 2025Updated last year
- ☆34Apr 29, 2026Updated 4 months ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Feb 29, 2024Updated 2 years ago
- ☆22Apr 10, 2025Updated last year
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆17Jul 19, 2022Updated 4 years ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆49Nov 17, 2025Updated 9 months ago
- Run TTPs, with AI!☆142Feb 23, 2026Updated 6 months ago
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆373Apr 28, 2026Updated 4 months ago
- Threat-hunting tool for Linux☆1,085Aug 24, 2026Updated last week
- TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …☆420Jan 23, 2025Updated last year
- BOF to decrypt Signal Desktop chat logs☆70Feb 20, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- An ADCS honeypot to catch attackers in your internal network.☆336Jun 27, 2024Updated 2 years ago
- Active C&C Detector☆156Oct 5, 2023Updated 2 years ago
- Construct triage artifact based on rules☆16Jun 18, 2026Updated 2 months ago
- MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs☆761Feb 1, 2026Updated 7 months ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- This tool clusters malware samples and extracts core shared artefacts by combining static analysis, optional dynamic analysis, and progre…☆25Apr 11, 2026Updated 4 months ago
- CVE-2025-1974☆91Apr 2, 2025Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.☆201Nov 5, 2025Updated 10 months ago
- The CTI-CMM assessment is a stand-alone spreadsheet intended for users to download and use locally.☆25Jan 20, 2026Updated 7 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆234Mar 28, 2025Updated last year
- Finding ClickFix and FakeCAPTCHA like it's 1999☆154Updated this week
- Kunai Sandbox UI☆17Mar 2, 2026Updated 6 months ago
- ☆81Aug 27, 2025Updated last year
- Examine Chrome extensions for security issues☆98Nov 16, 2025Updated 9 months ago