WebTrap
This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites. The deceptive webpages are generated by cloning real websites, specifically their login pages. For further reading material on the tool development, please visit our blog. Getting Started The project is composed of two tools: - Web Cloner: Responsible for cloning real websites and creating the deceptive webpage. - Deceptive Web server: Responsible for serving the cloned webpages, and reporting to a syslog server upon requests. Operating System The project was designed and tested on an Ubuntu 16.04 machine. Prerequisites - pip install requests - apt install gir1.2-webkit2-3.0 python-gi python-gi-cairo python3-gi python3-gi-cairo gir1.2-gtk-3.0 How to use How to use the Web Cloner: usage: WebCloner.py [-h] [-o OUTPUT_DIRECTORY] website_url positional arguments: website_url: The URL path to the web page you desire to clone optional arguments: -h, --help: show this help message and exit -o OUTPUT_DIRECTORY, --output-directory OUTPUT_DIRECTORY: Setting the output directory for the cloned webpage How to run the Deceptive web server: usage: TrapServer.py [-h] [--webroot-directory W
FEATURES
ALTERNATIVES
Proof-of-concept implementation of TAXII services for developers and non-developers.
The Cybersecurity and Infrastructure Security Agency (CISA) is a government agency that provides alerts, advisories, and resources to help protect the United States' critical infrastructure from cyber threats.
OpenIOC editor for building and manipulating threat intelligence data with support for various systems.
ONYPHE is a cyber defense search engine that discovers exposed assets and provides real-time monitoring to identify vulnerabilities and potential risks.
FraudGuard is a service that provides real-time internet traffic analysis and IP tracking to help validate usage and prevent fraud.
Facilitating exchange of information and knowledge to collectively protect against cyberattacks.
An IOC tracker written in Python that queries Google Custom Search Engines for various cybersecurity indicators and monitors domain status using Google Safe Browsing APIs.
Scan files or process memory for Cobalt Strike beacons and parse their configuration.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.