https://github.com/ejfox/llm-honeypot
a little experiment made as a mothtrap for unsuspecting llms scraping the web. lets see what we catch! 🦋
https://github.com/ejfox/llm-honeypot
bot-detection experiment honeypot security-research
Last synced: 4 months ago
JSON representation
a little experiment made as a mothtrap for unsuspecting llms scraping the web. lets see what we catch! 🦋
- Host: GitHub
- URL: https://github.com/ejfox/llm-honeypot
- Owner: ejfox
- Created: 2025-08-02T13:32:37.000Z (10 months ago)
- Default Branch: main
- Last Pushed: 2025-08-02T13:32:38.000Z (10 months ago)
- Last Synced: 2025-10-26T01:39:11.839Z (7 months ago)
- Topics: bot-detection, experiment, honeypot, security-research
- Language: HTML
- Size: 5.86 KB
- Stars: 1
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Robot-Only Honeypot
A defensive security honeypot that **only allows robots** - the inverse of "prove you are human".
## 🤖 What It Does
- **Blocks humans** with warnings and redirects
- **Welcomes bots** and logs their activity
- **Detects automation** using multiple fingerprinting techniques
- **Sets honeypot traps** with invisible links and forms
## 🚀 Quick Start
1. Serve the files with any web server:
```bash
python -m http.server 8000
# or
npx serve .
```
2. Visit `http://localhost:8000`
- **Humans**: Get blocked and redirected
- **Bots**: Access granted with activity logging
## 📁 Files
- `index.html` - Main honeypot page with robot verification
- `bot-detector.js` - Advanced detection and logging system
- `robots.txt` - Attracts bots to honeypot areas
- `honeypot-triggered.html` - Success page for detected bots
## 🎯 Detection Methods
- User-Agent analysis (bot keywords)
- WebDriver/Selenium detection
- Browser feature fingerprinting
- Behavioral analysis (rapid navigation, hidden clicks)
## 🔒 Security Use Cases
- Bot behavior analysis
- Threat intelligence gathering
- Automated attack detection
- Security research and testing
## ⚠️ Disclaimer
For defensive security research only. Monitor logs for malicious activity and ensure compliance with applicable laws.