{"id":27968530,"url":"https://github.com/redsiege/gppdeception","last_synced_at":"2025-08-20T09:22:42.053Z","repository":{"id":86559439,"uuid":"245555912","full_name":"RedSiege/GPPDeception","owner":"RedSiege","description":"This script generates a groups.xml file that mimics a real GPP to create a new user on domain-joined computers","archived":false,"fork":false,"pushed_at":"2020-03-09T03:45:05.000Z","size":6,"stargazers_count":46,"open_issues_count":0,"forks_count":10,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-08-09T01:32:10.224Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RedSiege.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-03-07T02:42:24.000Z","updated_at":"2025-04-18T04:07:49.000Z","dependencies_parsed_at":null,"dependency_job_id":"7258c7ef-98fc-42fb-9db6-16a4a2b985f5","html_url":"https://github.com/RedSiege/GPPDeception","commit_stats":null,"previous_names":["redsiege/gppdeception"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/RedSiege/GPPDeception","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FGPPDeception","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FGPPDeception/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FGPPDeception/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FGPPDeception/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RedSiege","download_url":"https://codeload.github.com/RedSiege/GPPDeception/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RedSiege%2FGPPDeception/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":269969197,"owners_count":24505424,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-11T02:00:10.019Z","response_time":75,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-05-07T21:04:07.607Z","updated_at":"2025-08-11T22:35:33.403Z","avatar_url":"https://github.com/RedSiege.png","language":"PowerShell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# GPPDeception\nThis script generates a groups.xml file that mimics a real GPP to create a new user on domain-joined computers.  \n\nBlue teams can use this file as a \u003ca href=\"https://blog.code42.com/using-honey-files-to-stop-data-exfiltration/\"\u003ehoneyfile\u003c/a\u003e. \nBy monitoring for access to the file, Blue Teams can detect pen testers or malicious actors scanning for GPP files containing usernames\nand cpasswords for lateral movment.  \n\nBlue Teams can also monitor for use of the credentials as \u003ca href=\"https://www.sans.org/reading-room/whitepapers/attacking/catching-flies-guide-flavors-honeypots-36897\"\u003ehoneycreds\u003c/a\u003e.\n\n# Usage\nInvoke-GPPDeception -Plaintext plaintextpassword -UserName honeycredaccount\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredsiege%2Fgppdeception","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fredsiege%2Fgppdeception","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fredsiege%2Fgppdeception/lists"}