Skip to content

v0.1.0

Choose a tag to compare

@nizartuanku nizartuanku released this 21 Aug 23:34
· 26 commits to main since this release

Decoy v0.1.0

Self-hosted canary tokens & honeypots: web/URL tokens, document beacons (docx/xlsx/pdf), TCP honeypot listeners, DNS tokens and fake cloud credentials — alerts the moment anything is touched.

This is the free edition, built from this repository with an empty license issuer key — it has no license activation. Free-tier limits: 3 tokens + 1 honeypot (advanced traps: Pro/Team). Pro and Team tiers (higher limits, delivered binaries) are available at whop.com/nizar-tuanku/decoy-canary-honeypots.

Install

tar -xzf decoy-free-0.1.0-linux-amd64.tar.gz
./decoy

Dashboard: http://127.0.0.1:8424 — single binary, SQLite storage in the working directory, no telemetry, nothing leaves your network.

Or build from source (Go 1.24+, CGO required for the SQLite driver):

go build ./cmd/decoy

Integrity

Verify the download:

sha256sum -c SHA256SUMS

SHA-256: 9617bb5fc80baaea58c1c5ea618de418845e2d4d07499c53a6d46bb6f389c02c

Feedback

Run it in a lab first. Bug reports and lab feedback via GitHub Issues are very welcome.