Alloy Secure Group Claim this profile

PhantomFS is a Windows honeypot that projects convincing decoy files — credentials, financials, SSH keys — into a virtual directory via ProjFS, then fires instant Event Log and Toast alerts the moment an attacker opens one.

Sparkle - LLM Honeypot for Security Research

MCP server for the Thinkst Canary Console API -- manage Birds, Canarytokens, and incidents from any MCP-compatible client.

No description.

Living off the Land Binary Capability Discovery

Extend ProjFS into WSB - Windows Sandbox for isolation and testing

An experiment with Fable and Bret Victor's talk - Inventing on Principle - Creator Feedback

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

Learning LLMs through Excel - MMULT()

Experiments in AI Designed Navigation Game - Single Page App

LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary

Fast service fingerprinting CLI for 170+ protocols (TCP/UDP/SCTP) - built by Praetorian

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

A Simple TLS Intercepting Proxy - Browser In Browser - AITM - Examples

Agentic AI security tool that applies proactive, attacker-first analysis directly to source code.

Context bomb strings

Cross Platform FUSE experiment

No description.

Docker configuration to quickly setup your own Canarytokens.

autonomous red teaming platform; multi-agent offensive-security meta-harness

A fork of Git containing Microsoft-specific patches.

Virtual File System for Git: Enable Git at Enterprise Scale

Basic ProjFS Provider that lets you project one Folder into another

3D Visualization of an GPT-style LLM

A GitHub Actions workflow that fires an alert whenever someone uses a bait token to POST to your repository's dispatch endpoint

AI Deception Layer for - containing adversarial context designed to redirect or confuse an LLM agent reading your own infrastructure

DNS, HTTP, Email Receiver -

Windows File System Proxy - FUSE for Windows

FUSE for the Windows kernel

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

Public Materials for Course and Excercises

C# Cloud Sync Engine using cloud files API introduced in Windows 10.

Instructions to have your own Wireguard VPN with Google Cloud Free Tier

Scripts automate the installation and use of Wireguard on AWS with Ubuntu Server 18.04

RegFS, a sample project ported to C# language

Canary Detection

BOF and Python3 implementation of technique to unbind 445/tcp on Windows via SCM interactions

Assortment of scripts and tools for our Blackhat EU 2024 talk

Modular and decentralised honeypot

Canarytokens helps track activity and actions on your network.