Honeypot Security Node

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_183":184,"_185":186},"routes/_app.x.$handle.$name",{"_99":98,"_32":44,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",19,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","new-file-8443.ts","latestPath","fileId","e80f9f86-ab39-11f1-86b6-1607ee4eb77e","name","fileType","http","content","import { sqlite } from \"https://esm.town\";\nimport { email } from \"https://esm.town\";\n\n// 🔐 SECURITY RULE: Set your custom master password to protect your logs dashboard\nconst DASHBOARD_PASSWORD = \"my-secret-password-123\";\n\nexport default async function (req: Request) {\n const url = new URL(req.url);\n const method = req.method;\n\n // 1. Initialize Database Schema\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS enterprise_honeypot_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n timestamp TEXT,\n ip TEXT,\n ua TEXT,\n path TEXT,\n method TEXT,\n payload TEXT,\n attack_type TEXT,\n session_id TEXT\n )\n `);\n\n // 2. PROTECTED DASHBOARD CORE LOGIC\n if (url.pathname === \"/view-logs\") {\n // Read the secret password sent securely from the Authorization header\n const authHeader = req.headers.get(\"Authorization\");\n const userPass = authHeader\n ? authHeader.replace(\"Bearer \", \"\").trim()\n : null;\n\n // If password matches, return the raw log data rows as clean JSON\n if (userPass === DASHBOARD_PASSWORD) {\n const results = await sqlite.execute(\n \"SELECT * FROM enterprise_honeypot_logs ORDER BY id DESC LIMIT 50\",\n );\n return Response.json(results.rows);\n }\n\n // Serve the secure Dashboard User Interface webpage if unauthenticated\n const interfaceHtml = `\n \n \n \n Honeypot Security Node\n \n \n \n \n

🛡️ Honeypot Threat Intelligence Control

🔒 Unauthorized Access: Invalid Password Token Provided.

\n \n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Timestamp	Attacker IP	Session Tracking ID	Action & Target Path	Classification	Payload
Awaiting secure cryptographic handshake...

\n\n \n \n \n `;\n return new Response(interfaceHtml, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // 3. EXTRACT INBOUND PAYLOADS FROM PROBES\n let payloadBody = \"\";\n if (method === \"POST\" || method === \"PUT\" || method === \"PATCH\") {\n try {\n payloadBody = await req.text();\n } catch {\n payloadBody = \"[Unparseable]\";\n }\n }\n\n const ip = req.headers.get(\"x-forwarded-for\") || \"unknown\";\n const ua = req.headers.get(\"user-agent\") || \"unknown\";\n const timestamp = new Date().toISOString();\n\n // 4. INTELLIGENT THREAT SIGNATURE FINGERPRINTING\n let attackType = \"Reconnaissance\";\n const combinedData = (url.pathname + url.search + payloadBody).toLowerCase();\n\n if (/union\\s+select|select\\s+.*\\s+from|drop\\s+table/i.test(combinedData)) {\n attackType = \"SQL Injection (SQLi)\";\n } else if (/\n url.pathname.toLowerCase().includes(v)\n )\n ) {\n attackType = \"Known Vulnerability Scan\";\n }\n\n // 5. ATTACKER SESSION COOKIE TRACKING\n const cookieHeader = req.headers.get(\"cookie\") || \"\";\n let sessionId = cookieHeader.match(/__htid=([^;]+)/)?.[1];\n let isNewSession = false;\n\n if (!sessionId) {\n sessionId = crypto.randomUUID();\n isNewSession = true;\n }\n\n // Commit transaction log directly to SQLite\n await sqlite.execute({\n sql:\n `INSERT INTO enterprise_honeypot_logs (timestamp, ip, ua, path, method, payload, attack_type, session_id) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n timestamp,\n ip,\n ua,\n url.pathname,\n method,\n payloadBody,\n attackType,\n sessionId,\n ],\n });\n\n // 6. PIPELINE EMAIL ALERT RULES\n if (attackType !== \"Reconnaissance\" || method === \"POST\") {\n try {\n await email({\n subject: `⚠️ HONEYPOT ALERT: ${attackType} Detected`,\n text:\n `Threat Signature Isolated:\\n\\nType: ${attackType}\\nSession ID: ${sessionId}\\nIP: ${ip}\\nPath: [${method}] ${url.pathname}\\nPayload: ${payloadBody}`,\n });\n } catch (e) {\n console.error(e.message);\n }\n }\n\n // 7. DECEPTIVE SIMULATION BREAK: Respond & Drop Tracking Cookie\n const responseHeaders = new Headers({\n \"Content-Type\": \"application/json\",\n });\n if (isNewSession) {\n responseHeaders.append(\n \"Set-Cookie\",\n `__htid=${sessionId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=31536000`,\n );\n }\n\n return new Response(\n JSON.stringify({\n error: \"SystemIntegrityFault\",\n status: 500,\n incident_id: crypto.randomUUID().substring(0, 8),\n }),\n { status: 500, headers: responseHeaders },\n );\n}","createdAt",["D",1788840807409],"branchVersion","branchId","c2b3840e-58f0-43e8-be31-7f8f660d3ac5","id","5874b577-0f4b-4dc2-8df4-d0a9b6915fc3","security-test",["D",1788839115838],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","A test for eithical hacking","imageUrl","71dd8e68-0bdc-406a-80ca-10c2c5c89c48","pinnedFileId","d4166bba-ab37-11f1-a829-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a079d4-a61e-70f7-8070-e49f40e3accd","tursoName","5874b5770f4b4dc28df4d0a9b6915fc3","tursoHostname","5874b5770f4b4dc28df4d0a9b6915fc3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789448471428],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",20,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","itdude207","handle","displayName","ITDUDE207","avatar","https://avatars.githubusercontent.com/u/261690574?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":178,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":179,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":180,"_83":181,"_85":182,"_87":25},"tree",[165,166,167],"files",[165,166,167],"counts",{"_155":62,"_156":151,"_157":62,"_158":159,"_160":161},"contents",[130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":146,"_32":147,"_30":148,"_134":-5,"_40":41,"_39":149,"_135":58,"_37":150,"_13":151,"_33":152,"_35":153,"_24":25,"_138":-5,"_27":154},{"_42":140,"_32":141,"_30":56,"_134":-5,"_40":41,"_39":137,"_135":58,"_37":142,"_13":143,"_33":34,"_35":144,"_24":25,"_138":44,"_27":145},{"_42":133,"_32":28,"_30":31,"_134":-5,"_40":41,"_39":14,"_135":25,"_37":136,"_13":137,"_33":34,"_35":36,"_24":25,"_138":-5,"_27":139},"acedf2fb-a721-4247-996f-3aec753eb9b8","parentId","latest",["D",1788840807409],9,"label",[28],"58db04e7-b7d0-40d8-9d2b-86c7b2267488","new-file-4768.ts",["D",1788839612678],6,"import axios from \"npm:axios\";\n\nexport default async function (req: Request) {\n const urlParams = new URL(req.url).searchParams;\n const targetUrl = urlParams.get(\"target\");\n\n // If a target URL is provided, run the security audit\n if (targetUrl) {\n try {\n // Validate that it's a properly formatted URL\n new URL(targetUrl);\n } catch {\n return new Response(\n \"Invalid URL format. Please include http:// or https://\",\n { status: 400 },\n );\n }\n\n const REQUEST_COUNT = 50;\n const promises = Array.from({ length: REQUEST_COUNT }).map(\n async (_, index) => {\n try {\n const startTime = Date.now();\n const response = await axios.get(targetUrl, {\n timeout: 4000,\n headers: { \"User-Agent\": \"ValTown-WAF-Auditor-Bot/1.0\" },\n });\n return {\n id: index + 1,\n status: response.status,\n time: Date.now() - startTime,\n };\n } catch (error) {\n return {\n id: index + 1,\n status: error.response?.status || \"TIMEOUT/BLOCKED\",\n time: 0,\n };\n }\n },\n );\n\n const rawResults = await Promise.all(promises);\n\n // Aggregate data points for visualization\n const statusCounts: Record = {};\n rawResults.forEach((r) => {\n statusCounts[r.status] = (statusCounts[r.status] || 0) + 1;\n });\n\n // Generate HTML report with an embedded chart layout placeholder\n const htmlReport = `\n \n \n \n Audit Results: ${targetUrl}\n \n \n \n

WAF & Rate-Limit Audit Report

Target: ${targetUrl}

\n \n

Summary Status Distribution

If the site successfully blocked the burst, you should see many 429 (Too Many Requests) or connection drop failures.

Status ${status}: ${count} requests

\n\n

Raw Sequence Logs

\n \n \n ${\n rawResults.map((r) => `\n \n \n \n \n \n `).join(\"\")\n }\n

Request #	HTTP Status Code	Latency
${r.id}	${r.status}	${r.time > 0 ? `${r.time}ms` : \"N/A\"}

\n
\n ← Test Another Site\n \n \n `;\n\n return new Response(htmlReport, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Default Form Interface View\n const initialFormHtml = `\n \n \n \n Ethical Hacking: WAF Tester\n \n \n \n

🛡️ Rate-Limit & WAF Stress Auditor

Simulate an automated credential stuffing or aggressive scanning request burst against your site.

\n \n

\n ⚠️ Ethical Hacking Notice: Only target web assets that you personally own or have explicit written authorization to test. Unauthorized automated scanning can trigger security alerts or hosting dynamic overage fees.\n

\n\n \n \n \n `;\n\n return new Response(initialFormHtml, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n}",[141],"4f619459-897b-4d12-afbd-b08608068197","main.ts","b433ef8e-ab37-11f1-a99e-1607ee4eb77e",2,["D",1788839121779],1,"script","import axios from \"npm:axios\";\n\nexport default async function (req: Request) {\n // Specify an endpoint on your OWN website to test\n const TARGET_URL = \"https://your-own-website-domain.com\";\n const REQUEST_COUNT = 10;\n\n const promises = Array.from({ length: REQUEST_COUNT }).map(\n async (_, index) => {\n try {\n const startTime = Date.now();\n const response = await axios.get(TARGET_URL, {\n timeout: 3000,\n headers: { \"User-Agent\": \"ValTown-Security-Audit-Bot\" },\n });\n return {\n req: index + 1,\n status: response.status,\n duration: `${Date.now() - startTime}ms`,\n };\n } catch (error) {\n return {\n req: index + 1,\n status: error.response?.status || \"TIMED_OUT\",\n message: error.message,\n };\n }\n },\n );\n\n const results = await Promise.all(promises);\n\n // Count how many requests were blocked (e.g., 429 Too Many Requests) vs how many succeeded (200 OK)\n return Response.json({\n message: \"Rate-limit audit complete.\",\n results,\n });\n}",[147],"pulls","branches","forks","envVars",{"_162":62,"_164":62},"connections",{"_162":62,"_163":62},"count","unfilledCount","emptyCount",{"_42":146,"_32":147,"_30":148,"_134":-5,"_40":41,"_39":149,"_135":58,"_37":175,"_13":151,"_33":152,"_35":153,"_24":25,"_138":-5,"_169":176,"_27":177},{"_42":140,"_32":141,"_30":56,"_134":-5,"_40":41,"_39":137,"_135":58,"_37":172,"_13":143,"_33":34,"_35":144,"_24":25,"_138":44,"_169":173,"_27":174},{"_42":133,"_32":28,"_30":31,"_134":-5,"_40":41,"_39":14,"_135":25,"_37":168,"_13":137,"_33":34,"_35":36,"_24":25,"_138":-5,"_169":170,"_27":171},["D",1788840807409],"children",[],[28],["D",1788839612678],[],[141],["D",1788839121779],[],[147],["D",1788839115838],["D",1789448471428],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},{"_13":88,"_32":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_127":216,"_217":218,"_219":220,"_221":25,"_222":25,"_223":25,"_224":58,"_225":-5,"_226":-7,"_227":-7,"_228":62,"_229":25,"_230":25,"_231":-5,"_232":25,"_233":25,"_234":25,"_235":-5},"ENV",{"_187":188,"_189":190,"_191":89,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v19