deception-router
所属分类：WEB开发
开发工具：Elixir
文件大小：0KB
下载次数：0
上传日期：2024-04-01 02:38:51
上 传 者：
sh-1993
说明： Elixir Plug路由器，将在无限数量的无意义请求中捕获扫描仪、垃圾邮件和爬虫
(Elixir Plug router that will trap scanners, spambots, and crawlers in an infinite number of pointless requests)
文件列表:
example/
lib/
test/
.formatter.exs
CHANGELOG.md
mix.exs
mix.lock
# DeceptionRouter
DeceptionRouter is a Plug router that will infinitely loop a web crawler, scanners,
and directory fuzzers.
This type of tool is created to aid in cyber deception primarily by wasting time
and resources of an attacker. Moreover, logs to these routes and be an alert
that some is trying to attack your systems.
This is useful to create honey pots in your system or add this to your main
application to keep scanners stuck.
This is inspired by the python library [spidertrap](https://github.com/adhdproject/spidertrap).
## Installation
```elixir
def deps do
[
{:deception_router, "~> 1.0"},
]
end
```
## Usage
```elixir
defmodule MyApp.Router do
# routes and stuff
# At the very bottom
scope "/" do
match(:*, "/*", DeceptionRouter, [])
end
end
```
If you want to target bots as all bots will scan for the an `admin` route you
can do this:
```elixir
defmodule MyApp.Router do
# routes and stuff
# At the very bottom
scope "/" do
match(:*, "/admin/*sinkhole", DeceptionRouter, [])
end
end
```
To test in command line:
```
wget -m http://localhost:4000
```
## Future ideas
This should all be runtime configuration items.
- custom word list
- generative text to make content lengths harder to filter on in this tools
- telemetry support
- custom logging
- jitter
- random 404s
近期下载者：
相关文件：
收藏者：