SYSTEM 2 Fake Target Decoy Company Portal (Honeypot Traps)
1. SOC Dashboard 2. Fake Company Portal (Active) 3. Attacker System

Operational Decoy Services

6 Active Deception Endpoints Ready for Adversary Engagement
Launch Demo Runner

Available Decoy Traps & Vulnerable Surfaces

AUTH / SSO Credential Trap

Corporate SSO Gateway

Simulated Single Sign-On login portal. Lures brute-force attackers, credential sprayers, and automated password guessing.

Route: /login (MITRE T1110)
Open SSO Portal →
ADMIN CONSOLE Privilege Escalation Trap

Admin Management Console

Decoy user directory and superadmin role overrides. Captures token manipulation and unauthorized administrative actions.

Route: /admin (MITRE T1078)
Open Admin Console →
STORAGE VAULT Data Exfiltration Lure

Backup & Storage Vault

Decoy database dumps (`.sql`), employee records (`.csv`), and config secrets (`.zip`). Generates synthetic payloads upon download.

Route: /backup (MITRE T1567)
View Backup Vault →
DATABASE / SQL SQL Injection Trap

SQL Workbench & Query Console

Interactive database query editor that safely analyzes SQL injection attacks (`OR 1=1`, `UNION SELECT`) with zero DB risk.

Route: /database (MITRE T1190)
Launch Workbench →
API GATEWAY Endpoint Scanning Trap

Internal REST API Explorer

Exposes mock internal microservice endpoints (`/users`, `/admin`, `/config`). Captures automated API reconnaissance probes.

Route: /api-explorer (MITRE T1046)
Explore APIs →
DOCUMENTS / FS Directory Traversal Trap

Document Repository Search

Internal file search engine that detects traversal attempts (`../../etc/passwd`, `win.ini`) and routes logs to the SOC dashboard.

Route: /search (MITRE T1083)
Search Documents →