15/08/2026
Krawl — Modern Web Honeypot & Deception Server
A customizable, cloud-native web honeypot designed to detect, track, delay, and analyze malicious attackers, automated scanners, and web crawlers using deceptive web applications, fake credentials, and canary tokens.
✨ Highlights: • AI-generated deception pages to create realistic fake attack surfaces
• Fake login pages for WordPress, phpMyAdmin, and admin panels
• Honeypot paths advertised through robots.txt to attract scanners
• Fake credentials, API keys, configuration files, and other decoys
• Spider traps with infinite randomized links to waste crawler resources
• Canary Token integration for external alerts
• IP reputation system for classifying attackers and crawlers
• Detects behaviors such as SQLi, XSS, path traversal, and risky HTTP methods
• Random server headers and error injection for realistic deception
• Real-time dashboard with attack activity, IP insights, and attack types
• IP tracking, banning, and firewall export support for IPTables/Nftables
• Prometheus metrics and Grafana dashboard support
• Standalone mode with SQLite or scalable deployment with PostgreSQL + Redis
• Docker and Kubernetes/Helm deployment support
• Customizable wordlists, templates, thresholds, and deception behavior
🔗 The repo is available in the comment section.