canarytokens 开源项目推荐（27 个）

tracebit-com /context-bombs

Context bomb strings

LyndLabs /DNS-DriveBy

利用开放 WiFi 网络和 DNS 请求进行路过式数据窃取

0xNslabs /CanaryTokenScanner

Detects CanaryTokens in Office docs and PDFs (docx, xlsx, pptx, pdf) without triggering alerts

Lupovis /DetectingCanaryTokens

A Red Team Script to Detect Canary Tokens and Seed Files

JohnEarle /coalmine

Cloud Canary Object Orchestration Management Platform

andrewmichaelsmith /flux

HTTP honeypot on autopilot

ursachec /ectg

eBPF Canarytoken trigger

BenjiTrapp /ExcelCoon-weaponizer

Weaponize .xlsx files with hidden tracking pixels and NTLMv2 hash-capture payloads via HTTP, SMB, or WebDAV — no macros, zero dependencies, pure Python.

jkerai1 /CanaryTokensToSentinel

Bring CanaryTokens Into Sentinel

carvilsi /caetra

Linux Phisical Security based on eBPF

TheHolyOneZ /ZHoneyPot

Linux本地优先蜜罐工具包。在文件系统中投放令人信服的诱饵凭据——AWS密钥、SSH密钥对、.env文件等——一旦有任何东西接触到它们，就能获得不到秒的取证警报。零遥测。GPL-3.0。

privacykey /mantis

open source serverless tripwires for detecting unwanted access.

ReconInfoSec /ansible-canarytokens

Ansible role to deploy canarytokens with Docker

BadSamuraiDev /Clikki-Tikki-Tavi

Low regret ClickFix mitigation script for Windows

ubercylon8 /f0_hpot

Self-hosted deception platform — canarytokens and endpoint honeypots you run yourself

bborn /tattle

Free, assume-breach security monitoring for a handful of laptops and servers: off-box daily diffs, silence alerts, canaries. Cloudflare Workers + ntfy.

dwmk /canarytokens-to-discord-to-json

A three-layer pipeline for extracting infodumps from webhooks attached to CanaryTokens from a specific text channel on Discord

pilat /tripflare

Self-hosted DNS + HTTPS canary in a single Go binary — mint a link, see exactly who resolves and fetches it, live.

unfantasmaenelsistema /HoneyTokenLab

Laboratorio de honeytokens en el navegador: genera trampas (Word, Excel, PDF, QR, .env…) que avisan a tu receptor y aprende cuándo saltan de verdad.

brian-mitchell-sec /http-bait

An HTTP honeypot built to measure exploitation rather than discovery: attributable honeytokens, a shared detector table, and a reproducible offline analyzer.