DECeption with Evaluative Integrated Validation Engine (DECEIVE): Let an LLM do all the hard honeypot work!
☆286Jul 17, 2026Updated this week
Alternatives and similar repositories for DECEIVE
Users that are interested in DECEIVE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Galah: An LLM-powered web honeypot.☆656Jul 24, 2025Updated 11 months ago
- TIM is a Kusto investigation platform that enables a user to quickly pivot between data sources; annotate their findings; and promotes co…☆23Aug 7, 2024Updated last year
- Interactive, dynamic, and realistic LLM honeypots☆78Feb 18, 2025Updated last year
- Scripts for importing threat feeds and CTI articles, blogs, and reports into MISP.☆18Jun 28, 2026Updated 3 weeks ago
- A community-driven repository for threat hunting ideas, methodologies, and research that serves as a central gathering place for hunters …☆330Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An Aggressor Script that utilizes NtCreateUserProcess to run binaries☆32Jan 30, 2025Updated last year
- This project aims to compare and evaluate the telemetry of various EDR products.☆1,975Jul 7, 2026Updated 2 weeks ago
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Oct 9, 2024Updated last year
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Repo with supporting material for the talk titled "Cracking the Beacon: Automating the extraction of implant configurations"☆11Feb 6, 2025Updated last year
- Framework for Monitoring File Ingestion Source for Yara Matches☆52Mar 10, 2025Updated last year
- ☆791May 7, 2025Updated last year
- ☆34Apr 29, 2026Updated 2 months ago
- A Large Action Model designed to operate on MacOS or Windows which interacts with common C2 interfaces such as Cobalt Strike, Havoc, or B…☆26Feb 29, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆22Apr 10, 2025Updated last year
- A not so awesome list of adversary emulation gems for aspiring red/blue/purple teamers☆16Jul 19, 2022Updated 4 years ago
- NoDelete is a tool that assists in malware analysis by locking a folder where malware drops files before deleting them.☆50Nov 17, 2025Updated 8 months ago
- Run TTPs, with AI!☆140Feb 23, 2026Updated 4 months ago
- gpoParser is a tool designed to extract and analyze configurations applied through Group Policy Objects (GPOs) in an Active Directory env…☆366Apr 28, 2026Updated 2 months ago
- Threat-hunting tool for Linux☆1,082Jul 10, 2026Updated last week
- TokenSmith generates Entra ID access & refresh tokens on offensive engagements. It is suitable for both covert adversary simulations and …☆415Jan 23, 2025Updated last year
- BOF to decrypt Signal Desktop chat logs☆70Feb 20, 2025Updated last year
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An ADCS honeypot to catch attackers in your internal network.☆330Jun 27, 2024Updated 2 years ago
- Active C&C Detector☆156Oct 5, 2023Updated 2 years ago
- Construct triage artifact based on rules☆15Jun 18, 2026Updated last month
- MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs☆761Feb 1, 2026Updated 5 months ago
- Repo for experimenting and testing MCP server builds for CTI-related research.☆27May 13, 2025Updated last year
- This tool clusters malware samples and extracts core shared artefacts by combining static analysis, optional dynamic analysis, and progre…☆24Apr 11, 2026Updated 3 months ago
- CVE-2025-1974☆90Apr 2, 2025Updated last year
- Respotter is a Responder honeypot. Detect Responder in your environment as soon as it's spun up.☆201Nov 5, 2025Updated 8 months ago
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The CTI-CMM assessment is a stand-alone spreadsheet intended for users to download and use locally.☆25Jan 20, 2026Updated 6 months ago
- RedInfraCraft automates the deployment of powerful red team infrastructures! It streamlines the setup of C2s, makes it easy to create adv…☆233Mar 28, 2025Updated last year
- Kunai Sandbox UI☆16Mar 2, 2026Updated 4 months ago
- Finding ClickFix and FakeCAPTCHA like it's 1999☆150Updated this week
- ☆81Aug 27, 2025Updated 10 months ago
- Examine Chrome extensions for security issues☆98Nov 16, 2025Updated 8 months ago
- A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data int…☆2,524Updated this week