Honeypot Security Node

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","itdude207","name","security-test","path","new-file-8443.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/itdude207/security-test/code/new-file-8443.ts","extension","id","d16911e7-3117-438c-8f99-43e804347bcf","fileId","e80f9f86-ab39-11f1-86b6-1607ee4eb77e","parentId","branchId","c2b3840e-58f0-43e8-be31-7f8f660d3ac5","branchVersion",20,"latest",true,"createdAt",["D",1788840832819],"version",10,"fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { email } from \"https://esm.town/v/std/email\";\n\n// 🔐 SECURITY RULE: Set your custom master password to protect your logs dashboard\nconst DASHBOARD_PASSWORD = \"my-secret-password-123\";\n\nexport default async function (req: Request) {\n const url = new URL(req.url);\n const method = req.method;\n\n // 1. Initialize Database Schema\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS enterprise_honeypot_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n timestamp TEXT,\n ip TEXT,\n ua TEXT,\n path TEXT,\n method TEXT,\n payload TEXT,\n attack_type TEXT,\n session_id TEXT\n )\n `);\n\n // 2. PROTECTED DASHBOARD CORE LOGIC\n if (url.pathname === \"/view-logs\") {\n // Read the secret password sent securely from the Authorization header\n const authHeader = req.headers.get(\"Authorization\");\n const userPass = authHeader\n ? authHeader.replace(\"Bearer \", \"\").trim()\n : null;\n\n // If password matches, return the raw log data rows as clean JSON\n if (userPass === DASHBOARD_PASSWORD) {\n const results = await sqlite.execute(\n \"SELECT * FROM enterprise_honeypot_logs ORDER BY id DESC LIMIT 50\",\n );\n return Response.json(results.rows);\n }\n\n // Serve the secure Dashboard User Interface webpage if unauthenticated\n const interfaceHtml = `\n \n \n \n Honeypot Security Node\n \n \n \n \n

🛡️ Honeypot Threat Intelligence Control

🔒 Unauthorized Access: Invalid Password Token Provided.

\n \n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Timestamp	Attacker IP	Session Tracking ID	Action & Target Path	Classification	Payload
Awaiting secure cryptographic handshake...

\n\n \n \n \n `;\n return new Response(interfaceHtml, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // 3. EXTRACT INBOUND PAYLOADS FROM PROBES\n let payloadBody = \"\";\n if (method === \"POST\" || method === \"PUT\" || method === \"PATCH\") {\n try {\n payloadBody = await req.text();\n } catch {\n payloadBody = \"[Unparseable]\";\n }\n }\n\n const ip = req.headers.get(\"x-forwarded-for\") || \"unknown\";\n const ua = req.headers.get(\"user-agent\") || \"unknown\";\n const timestamp = new Date().toISOString();\n\n // 4. INTELLIGENT THREAT SIGNATURE FINGERPRINTING\n let attackType = \"Reconnaissance\";\n const combinedData = (url.pathname + url.search + payloadBody).toLowerCase();\n\n if (/union\\s+select|select\\s+.*\\s+from|drop\\s+table/i.test(combinedData)) {\n attackType = \"SQL Injection (SQLi)\";\n } else if (/\n url.pathname.toLowerCase().includes(v)\n )\n ) {\n attackType = \"Known Vulnerability Scan\";\n }\n\n // 5. ATTACKER SESSION COOKIE TRACKING\n const cookieHeader = req.headers.get(\"cookie\") || \"\";\n let sessionId = cookieHeader.match(/__htid=([^;]+)/)?.[1];\n let isNewSession = false;\n\n if (!sessionId) {\n sessionId = crypto.randomUUID();\n isNewSession = true;\n }\n\n // Commit transaction log directly to SQLite\n await sqlite.execute({\n sql:\n `INSERT INTO enterprise_honeypot_logs (timestamp, ip, ua, path, method, payload, attack_type, session_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n timestamp,\n ip,\n ua,\n url.pathname,\n method,\n payloadBody,\n attackType,\n sessionId,\n ],\n });\n\n // 6. PIPELINE EMAIL ALERT RULES\n if (attackType !== \"Reconnaissance\" || method === \"POST\") {\n try {\n await email({\n subject: `⚠️ HONEYPOT ALERT: ${attackType} Detected`,\n text:\n `Threat Signature Isolated:\\n\\nType: ${attackType}\\nSession ID: ${sessionId}\\nIP: ${ip}\\nPath: [${method}] ${url.pathname}\\nPayload: ${payloadBody}`,\n });\n } catch (e) {\n console.error(e.message);\n }\n }\n\n // 7. DECEPTIVE SIMULATION BREAK: Respond & Drop Tracking Cookie\n const responseHeaders = new Headers({\n \"Content-Type\": \"application/json\",\n });\n if (isNewSession) {\n responseHeaders.append(\n \"Set-Cookie\",\n `__htid=${sessionId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000`,\n );\n }\n\n return new Response(\n JSON.stringify({\n error: \"SystemIntegrityFault\",\n status: 500,\n incident_id: crypto.randomUUID().substring(0, 8),\n }),\n { status: 500, headers: responseHeaders },\n );\n}","deleted",false,"label",[14],"5874b577-0f4b-4dc2-8df4-d0a9b6915fc3",["D",1788839115838],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","A test for eithical hacking","imageUrl","userId","71dd8e68-0bdc-406a-80ca-10c2c5c89c48","pinnedFileId","d4166bba-ab37-11f1-a829-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a079d4-a61e-70f7-8070-e49f40e3accd","tursoName","5874b5770f4b4dc28df4d0a9b6915fc3","tursoHostname","5874b5770f4b4dc28df4d0a9b6915fc3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789535451117],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":30,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","ITDUDE207","avatar","https://avatars.githubusercontent.com/u/261690574?v=4","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":63,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]