Interactive demo · simulation
Honeypot Lab
Poke at the whole idea in your browser: fire attacks at a decoy, watch them get classified, work the cases in a management portal, then see each weakness found, fixed and retested.
Simulation. Everything here runs locally in this page with made-up data and documentation-range addresses. Nothing is sent anywhere, and no real portal exists yet: this is a mock-up of the planned one. See the project overview.
1 · The lab map
Six stages turn a hostile request into something an analyst can act on. Click a stage to read what it does, or send a probe through all of them.
2 · Fire an attack at the decoy
Pick an attack. The decoy answers with something fake, records the request, and the classifier gives it a category and a severity score.
Request seen by the decoy
Choose an attack above.
Classifier verdict
What the decoy answered
—
| Time | Source | Category | Sev |
|---|
No events yet.
3 · The management portal (mock-up)
Sign in as an analyst or an admin. Turn events from step 2 into cases, block sources, tune alert rules, and manage users. Try the admin tab as an analyst.
4 · Find it, break it, fix it, retest it
Each weakness has a vulnerable build (v1) and a hardened build (v2). Run the same action against both and compare. Results fill the findings table below.
Findings table
| Weakness | CWE | OWASP 2021 | v1 | v2 |
|---|
5 · The sandbox: what can reach what
The lab is built so hostile traffic can only go where it is meant to. Try each connection and see the verdict.
$ waiting for a connection test…
Snapshots
6 · Where the real project is
All real testing will happen only on systems I own, inside an isolated, authorised lab. This page contains no real data, no real addresses, and no code from the real portal.