SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

HoneyCrawlPot Tricks AI Vulnerability Scanners with Fake Credentials and Prompt Traps

0
·1 views

HoneyCrawlPot is an open-source middleware tool designed to deceive AI-powered vulnerability scanners that probe APIs for sensitive files like .env and AWS credentials. Instead of returning a standard 404 error, it serves a convincing fake file containing inert credentials, prompt-injection payloads, and a unique canary token. The prompt injections target LLM-based scanning agents, attempting to waste their token budgets, corrupt their reports, or trick them into marking a host as safe. The canary token allows developers to detect when a scanner has consumed the decoy, providing visibility into who is probing their systems. The tool requires no external dependencies and is compatible with both Hono and Express frameworks.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

GitHub Project Routes ChatGPT Planning to Codex Execution via Local Bridge

A public GitHub project called 'Codex with ChatGPT' separates the planning and code-review roles from actual code execution by assigning reasoning tasks to the ChatGPT web app while Codex handles file edits, shell commands, and test runs. The two tools communicate through a local C2C Bridge using structured state messages, with ChatGPT accessing repository context via nine read-only tools covering file reads, Git status, diffs, and test outputs. The project's security design keeps full file bodies and logs out of control-plane messages, and the bridge itself has no write, delete, shell, or commit capabilities, with sensitive paths blocked by default. Setup requires Git, Node.js 20 or later, and Cloudflare's tunneling tool, and uses OAuth 2.1 with one-time pairing codes for the publicly reachable endpoint. The project is an unofficial community effort and has not been endorsed or independently security-assessed by OpenAI.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

EarthLink Network Built Its Entire Operation on AI, Letting Humans Retain Only Judgment

EarthLink Network made AI the operational foundation of its entire company, starting from the premise that all work should run on AI rather than selectively assigning tasks to it. Rather than drawing a human-AI boundary in advance, the company handed over all work to AI first and observed what remained. Through this process, routine tasks with fixed steps — such as data gathering, text cleanup, and repetitive formatting — migrated to AI naturally. What stayed on the human side was judgment: setting priorities, deciding what to drop, and taking responsibility. The company frames this outcome not as an ideology but as a practical conclusion derived from running the experiment and measuring results by convenience and efficiency.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Ditches Needle2 for llama.cpp and Granite After Local Tool-Calling Tests

A developer building a semantic shell — which maps natural language commands to local filesystem tools — initially tested Needle2, a small model designed for tool calling and structured extraction. While Needle2 worked in basic scenarios, problems emerged as the tool set grew beyond a handful of options, since its retrieval-based shortlisting risked excluding the correct tool before final selection. The developer also found that small models are highly sensitive to tool descriptions, requiring precise, disambiguating language rather than brief documentation-style text. Concerns about whether confidence scores across candidate groups were globally comparable added further uncertainty. Ultimately, the need for native C++ integration without external processes led the developer to switch to llama.cpp paired with the Granite model.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Overreliance Risks Skill Loss and Declining Model Quality, Researchers Warn

Experts and researchers are raising concerns that heavy reliance on AI tools is causing skilled workers to lose their expertise over time. As users depend more on AI-generated outputs, institutional knowledge is gradually eroding rather than being preserved. This degraded human knowledge then feeds back into AI models as training input, a phenomenon researchers call 'knowledge collapse.' The cycle results in progressively worse model outputs as the quality of human-generated input declines. Multiple studies and papers, including research on semantic entropy and AI's impact on human cognition, are highlighting this feedback loop as a growing risk.

0 comments Read more at DEV Community
HoneyCrawlPot Tricks AI Vulnerability Scanners with Fake Credentials and Prompt Traps · ShortSingh