← all repositories

0x4D31/galah

An LLM-powered web honeypot that dynamically crafts HTTP responses to mimic various web applications.

649 stars Go Domain Apps
galah
Velocity · 7d
+0.7
★ / day
Trend
steady
star history

Galah is a web honeypot written in Go that leverages LLMs to dynamically generate realistic HTTP responses for any incoming request, rather than manually emulating specific applications. It supports major LLM providers (OpenAI, Anthropic, Google AI, Vertex AI, Cohere, Ollama) and caches responses per port to reduce API costs. The system can optionally inspect incoming requests against Suricata rules for additional detection logic.

heatdrop uses Google Analytics to see which pages get read — nothing else. Your call. How we handle data.