Deception Toolkit

• Can be installed without modification of proxied host
• Fine-grained control over deception strategies
• Easy deployment and configuration with containers and dashboard

Input(s):

• HTTP or SSH Service to Proxy

Main feature(s):

• Inject lures into application traffic
• Conceal critical information

Output(s):

• Alerts in dashboard
• High detection rate

• Need to set the firewall to only accept messages from the proxy
• Need to direct incoming requests through the proxy, e.g., by pointing the DNS domain to the proxies IP
• The SSH proxy needs the SSH keys or credentials for the SSH service that is being proxied

SMEs with HTTP or SSH service to protect.

None