0x4D31/galah

Galah: An LLM-powered web honeypot.

46
/ 100
Emerging

This project helps cybersecurity professionals detect and analyze malicious activity by creating highly realistic, AI-powered decoy web applications. You provide an AI model and configuration, and it generates dynamic, convincing responses to any incoming HTTP request, mimicking a real server. Security researchers and incident responders can use this to attract and study attackers without risking actual systems.

638 stars. No commits in the last 6 months.

Use this if you need to set up a web honeypot that can intelligently respond to a wide range of unexpected requests, providing dynamic and varied traps for attackers.

Not ideal if you require a honeypot that perfectly emulates a specific, known application or vulnerability with precise, pre-defined responses.

cybersecurity threat-intelligence incident-response network-security honeypots
Stale 6m No Package No Dependents
Maintenance 2 / 25
Adoption 10 / 25
Maturity 16 / 25
Community 18 / 25

How are scores calculated?

Stars

638

Forks

66

Language

Go

License

Apache-2.0

Last pushed

Jul 24, 2025

Commits (30d)

0

Get this data via API

curl "https://pt-edge.onrender.com/api/v1/quality/llm-tools/0x4D31/galah"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.