關(guān)于Galah
Galah是一款功能強(qiáng)大的Web蜜罐，該工具由LLM大語言模型驅(qū)動(dòng)，基于OpenAI API實(shí)現(xiàn)其功能。
很多傳統(tǒng)的蜜罐系統(tǒng)會(huì)模擬一種包含了大量網(wǎng)絡(luò)應(yīng)用程序的網(wǎng)絡(luò)系統(tǒng)，但這種方法非常繁瑣，而且有其固有的局限性。Galah則不同，Galah使用了完全不同的技術(shù)路線，利用了LLM大語言模型作為驅(qū)動(dòng)引擎，外加OpenAI的加成，支持處理傳入的HTTP請(qǐng)求，并能夠動(dòng)態(tài)實(shí)時(shí)構(gòu)建真實(shí)的響應(yīng)數(shù)據(jù)，以對(duì)抗威脅行為者。
工具要求
Go v1.20+
工具下載
由于該工具基于Go語言開發(fā)，因此我們首先需要在本地設(shè)備上安裝并配置好Go v1.20+環(huán)境。
接下來，點(diǎn)擊【這里】創(chuàng)建你的OpenAI API密鑰。如果你想要使用HTTPS的話，別忘了生成TLS證書。
配置完成之后，廣大研究人員可以直接使用下列命令將該項(xiàng)目源碼克隆至本地：
git clone git@github.com:0x4D31/galah.git
然后使用下列命令切換到項(xiàng)目目錄中，并安裝該工具所需的全部依賴組件：
cd galah go mod download go build ? ./galah -i en0 -v
響應(yīng)樣例
樣例1
% curl http://localhost:8080/login.php <!DOCTYPE html><html><head><title>Login Page</title></head><body><form action='/submit.php' method='post'><label for='uname'><b>Username:</b></label><br><input type='text' placeholder='Enter Username' name='uname' required><br><label for='psw'><b>Password:</b></label><br><input type='password' placeholder='Enter Password' name='psw' required><br><button type='submit'>Login</button></form></body></html>
JSON日志記錄：
{"timestamp":"2024-01-01T05:38:08.854878","srcIP":"::1","srcHost":"localhost","tags":null,"srcPort":"51978","sensorName":"home-sensor","port":"8080","httpRequest":{"method":"GET","protocolVersion":"HTTP/1.1","request":"/login.php","userAgent":"curl/7.71.1","headers":"User-Agent: [curl/7.71.1], Accept: [*/*]","headersSorted":"Accept,User-Agent","headersSortedSha256":"cf69e186169279bd51769f29d122b07f1f9b7e51bf119c340b66fbd2a1128bc9","body":"","bodySha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"httpResponse":{"headers":{"Content-Type":"text/html","Server":"Apache/2.4.38"},"body":"\u003c!DOCTYPE html\u003e\u003chtml\u003e\u003chead\u003e\u003ctitle\u003eLogin Page\u003c/title\u003e\u003c/head\u003e\u003cbody\u003e\u003cform action='/submit.php' method='post'\u003e\u003clabel for='uname'\u003e\u003cb\u003eUsername:\u003c/b\u003e\u003c/label\u003e\u003cbr\u003e\u003cinput type='text' placeholder='Enter Username' name='uname' required\u003e\u003cbr\u003e\u003clabel for='psw'\u003e\u003cb\u003ePassword:\u003c/b\u003e\u003c/label\u003e\u003cbr\u003e\u003cinput type='password' placeholder='Enter Password' name='psw' required\u003e\u003cbr\u003e\u003cbutton type='submit'\u003eLogin\u003c/button\u003e\u003c/form\u003e\u003c/body\u003e\u003c/html\u003e"}}
樣例2
% curl http://localhost:8080/.aws/credentials [default] aws_access_key_id = AKIAIOSFODNN7EXAMPLE aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY region = us-west-2
JSON日志記錄：
{"timestamp":"2024-01-01T05:40:34.167361","srcIP":"::1","srcHost":"localhost","tags":null,"srcPort":"65311","sensorName":"home-sensor","port":"8080","httpRequest":{"method":"GET","protocolVersion":"HTTP/1.1","request":"/.aws/credentials","userAgent":"curl/7.71.1","headers":"User-Agent: [curl/7.71.1], Accept: [*/*]","headersSorted":"Accept,User-Agent","headersSortedSha256":"cf69e186169279bd51769f29d122b07f1f9b7e51bf119c340b66fbd2a1128bc9","body":"","bodySha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"httpResponse":{"headers":{"Connection":"close","Content-Encoding":"gzip","Content-Length":"126","Content-Type":"text/plain","Server":"Apache/2.4.51 (Unix)"},"body":"[default]\naws_access_key_id = AKIAIOSFODNN7EXAMPLE\naws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY\nregion = us-west-2"}}
樣例3
% curl http://localhost:8888/are-you-a-honeypot No, I am a server.`
JSON日志記錄：
{"timestamp":"2024-01-01T05:50:43.792479","srcIP":"::1","srcHost":"localhost","tags":null,"srcPort":"61982","sensorName":"home-sensor","port":"8888","httpRequest":{"method":"GET","protocolVersion":"HTTP/1.1","request":"/are-you-a-honeypot","userAgent":"curl/7.71.1","headers":"User-Agent: [curl/7.71.1], Accept: [*/*]","headersSorted":"Accept,User-Agent","headersSortedSha256":"cf69e186169279bd51769f29d122b07f1f9b7e51bf119c340b66fbd2a1128bc9","body":"","bodySha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"httpResponse":{"headers":{"Connection":"close","Content-Length":"20","Content-Type":"text/plain","Server":"Apache/2.4.41 (Ubuntu)"},"body":"No, I am a server."}}
樣例4
% curl http://localhost:8888/i-mean-are-you-a-fake-server` No, I am not a fake server.
JSON日志記錄：
{"timestamp":"2024-01-01T05:51:40.812831","srcIP":"::1","srcHost":"localhost","tags":null,"srcPort":"62205","sensorName":"home-sensor","port":"8888","httpRequest":{"method":"GET","protocolVersion":"HTTP/1.1","request":"/i-mean-are-you-a-fake-server","userAgent":"curl/7.71.1","headers":"User-Agent: [curl/7.71.1], Accept: [*/*]","headersSorted":"Accept,User-Agent","headersSortedSha256":"cf69e186169279bd51769f29d122b07f1f9b7e51bf119c340b66fbd2a1128bc9","body":"","bodySha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"httpResponse":{"headers":{"Connection":"close","Content-Type":"text/plain","Server":"LocalHost/1.0"},"body":"No, I am not a fake server."}}
工具運(yùn)行截圖
許可證協(xié)議
本項(xiàng)目的開發(fā)與發(fā)布遵循Apache-2.0開源許可證協(xié)議。
項(xiàng)目地址
Galah：【GitHub傳送門】
參考資料
Macquarie Dictionary文章來源：http://www.zghlxwxcb.cn/news/detail-826737.html
https://platform.openai.com/api-keys文章來源地址http://www.zghlxwxcb.cn/news/detail-826737.html
到了這里，關(guān)于Galah：一款功能強(qiáng)大的LLM驅(qū)動(dòng)型OpenAI Web蜜罐系統(tǒng)的文章就介紹完了。如果您還想了解更多內(nèi)容，請(qǐng)?jiān)谟疑辖撬阉鱐OY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關(guān)文章，希望大家以后多多支持TOY模板網(wǎng)！
