15/08/2026
Krawl β Modern Web Honeypot & Deception Server
A customizable, cloud-native web honeypot designed to detect, track, delay, and analyze malicious attackers, automated scanners, and web crawlers using deceptive web applications, fake credentials, and canary tokens.
β¨ Highlights: β’ AI-generated deception pages to create realistic fake attack surfaces
β’ Fake login pages for WordPress, phpMyAdmin, and admin panels
β’ Honeypot paths advertised through robots.txt to attract scanners
β’ Fake credentials, API keys, configuration files, and other decoys
β’ Spider traps with infinite randomized links to waste crawler resources
β’ Canary Token integration for external alerts
β’ IP reputation system for classifying attackers and crawlers
β’ Detects behaviors such as SQLi, XSS, path traversal, and risky HTTP methods
β’ Random server headers and error injection for realistic deception
β’ Real-time dashboard with attack activity, IP insights, and attack types
β’ IP tracking, banning, and firewall export support for IPTables/Nftables
β’ Prometheus metrics and Grafana dashboard support
β’ Standalone mode with SQLite or scalable deployment with PostgreSQL + Redis
β’ Docker and Kubernetes/Helm deployment support
β’ Customizable wordlists, templates, thresholds, and deception behavior
π The repo is available in the comment section.