EoHoneypotBundle
A honeypot trap involves creating a form with an extra field that is hidden to human visitors but readable by robots. The robot fills out the invisible field and submits the form, leaving you to simply ignore their spammy submission or blacklist their IP. It’s a very simple concept that can be implemented in a few minutes and it just works – add them to your contact and submission forms to help reduce spam. Prerequisites: This version of the bundle requires Symfony 2.1+ Installation: Step 1: Download EoHoneypotBundle using Composer Add EoHoneypotBundle to your project by running the command: $ composer require eo/honeypot-bundle Composer will install the bundle to your project's vendor/eo directory. Step 2: Enable the bundle If you use Symfony Flex - skip this step. Otherwise, enable the bundle in bundles.php: <?php // config/bundles.php <?php return [ // ... Eo\HoneypotBundle\EoHoneypotBundle::class => ['all' => true], ]; Step 3 (optional): Configure bundle to use database To save honeypot catched requests into the database, you have to enable it in your configuration file: All parameters are optional # config/packages/eo
FEATURES
ALTERNATIVES
An Application Security Posture Management platform that provides visibility, security controls, and automated workflows across the software development lifecycle from code to cloud.
Goof is a vulnerable Node.js demo application that includes a series of vulnerabilities and exploits
This article discusses the different types of remote timing attacks and provides defense strategies against them.
A DevSecOps platform that combines SAST, DAST, SCA, and secret scanning with AI/ML-based analysis for continuous application security testing and vulnerability management.
FlowDroid is a context-, flow-, field-, object-sensitive and lifecycle-aware static taint analysis tool for Android applications.
ffufai is an AI-enhanced wrapper for ffuf that automatically suggests file extensions for web fuzzing based on the target URL and headers.
Application monitoring and security platform that provides runtime visibility, threat detection, and automated response capabilities for application-layer security
QIRA is a competitor to strace and gdb with MIT license, supporting Ubuntu and Docker for wider compatibility.
PINNED
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.