0x4D31/galah
An LLM-powered web honeypot that dynamically crafts HTTP responses to mimic various web applications.

Velocity · 7d
+0.7
★ / day
Trend
→steady
star history
Galah is a web honeypot written in Go that leverages LLMs to dynamically generate realistic HTTP responses for any incoming request, rather than manually emulating specific applications. It supports major LLM providers (OpenAI, Anthropic, Google AI, Vertex AI, Cohere, Ollama) and caches responses per port to reduce API costs. The system can optionally inspect incoming requests against Suricata rules for additional detection logic.