honeyλ - a simple, serverless application designed to create and monitor fake HTTP endpoints (i.e. URL honeytokens) automatically, on top of AWS Lambda and Amazon API Gateway
Alternatives To Honeylambda
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
Serverless45,3851,6181,0355 days ago2,353November 26, 20231,123mitJavaScript
⚡ Serverless Framework – Build web, mobile and IoT applications with serverless architectures using AWS Lambda, Azure Functions, Google CloudFunctions & more! –
Sst18,4851183 days ago478December 01, 2023764mitTypeScript
Build modern full-stack applications on AWS
Awesome Aws11,773
a month ago1December 21, 201565otherPython
A curated list of awesome Amazon Web Services (AWS) libraries, open source repos, guides, blogs, and other resources. Featuring the Fiery Meter of AWSome.
a month ago19April 25, 2021175otherJavaScript
Serverless Examples – A collection of boilerplates and examples of serverless architectures built with the Serverless Framework on AWS Lambda, Microsoft Azure, Google Cloud Functions, and more.
Chalice10,06712634a month ago88June 05, 2023470apache-2.0Python
Python Serverless Microframework for AWS
Serverless Application Model9,15484194 days ago91November 23, 202398apache-2.0Python
The AWS Serverless Application Model (AWS SAM) transform is a AWS CloudFormation macro that transforms SAM templates into CloudFormation templates.
Up8,73968162 months ago11March 02, 2018290mitGo
Deploy infinitely scalable serverless apps, apis, and sites in seconds to AWS.
Webiny Js6,92414411 hours ago417November 24, 2023305otherTypeScript
Open-source serverless enterprise CMS. Includes a headless CMS, page builder, form builder, and file manager. Easy to customize and expand. Deploys to AWS.
Aws Sam Cli6,400311312 hours ago178November 16, 2023419apache-2.0Python
CLI tool to build, test, debug, and deploy Serverless applications using AWS SAM
Docker Lambda5,8523817a year ago15June 30, 201868mitC#
Docker images and test runners that replicate the live AWS Lambda environment
Alternatives To Honeylambda
Select To Compare

Alternative Project Comparisons

Serverless trap

serverless License: GPL v3

honey - a simple serverless application designed to create and monitor URL {honey}tokens, on top of AWS Lambda and Amazon API Gateway

  • Slack notifications
  • Email and SMS alerts
  • Load config from local file or Amazon S3
  • Customize the HTTP response for each token
  • Threat Intelligence report (Source IP lookup)
    • Using Cymon API v2
  • Based on Serverless framework
    • pay-what-you-use
    • provider agnostic


honey allows you to create and monitor fake HTTP endpoints automatically. You can then place these URL honeytokens in e.g. your inbox, documents, browser history, or embed them as {hidden} links in your web pages (Note: honeybits can be used for spreading breadcrumbs across your systems to lure the attackers toward your traps). Depending on how and where you implement honeytokens, you may detect human attackers, malicious insiders, content scrapers, or bad bots.

This application is based on Serverless framework and can be deployed in different cloud providers such as Amazon Web Services (AWS), Microsoft Azure, IBM OpenWhisk or Google Cloud (Only tested on AWS; the main function may need small changes to support other providers). If your cloud provider is AWS, it automatically creates HTTP endpoints using Amazon API Gateway and then starts monitoring the HTTP endpoints using honey Lambda function.


  • Install Serverless framework:
    • npm install -g serverless
  • Install honey:
    • serverless install --url https://github.com/0x4d31/honeyLambda
  • Edit serverless.yml and set HTTP endpoint path (default: /v1/get-pass)
  • Edit config.json and fill in your Slack Webhook URL. Change the trap/token configs as you need
  • You can customize the HTTP response for each token
    • For example you can return a 1x1px beacon image in response and embed the token in your decoy documents or email (tracking pixel!)


  • Set up your AWS Credentials
  • In order to deploy honey, simply run:
    • serverless deploy


Serverless: Packaging service...
Serverless: Creating Stack...
Serverless: Checking Stack create progress...
Serverless: Stack create finished...
Serverless: Uploading CloudFormation file to S3...
Serverless: Uploading artifacts...
Serverless: Uploading service .zip file to S3 (116.22 KB)...
Serverless: Validating template...
Serverless: Updating Stack...
Serverless: Checking Stack update progress...
Serverless: Stack update finished...
Service Information
service: honeyLambda
stage: dev
region: ap-southeast-2
api keys:
  GET - https://rz1bEXAMPLE.execute-api.ap-southeast-2.amazonaws.com/dev/v1/get-pass
  honeylambda: honeyLambda-dev-honeylambda
  • Note: If you want to return binary in HTTP response (e.g. Content-Type: image/png), you have to manually configure Binary Support using the Amazon API Gateway console (it's not yet possible to set binary media types automatically using serverless):

Open the Amazon API Gateway console, add the binary media type */*, and save.

Once done, you have to re-deploy the API to the dev stage


Open the generated URL/endpoint in your browser to test if it works:


Slack Alert



  • [x] Remote config: load config from Amazon S3
  • [x] Beacon image / return image as HTTP response
  • [x] Customize the HTTP response for each token
  • [x] Check the source IP address against Threat Intelligence feeds (e.g. Cymon API)
  • [x] Email alert
  • [x] SMS alert (Twilio)
  • [ ] HTTP Client Fingerprinting
Popular Lambda Functions Projects
Popular Amazon Web Services Projects
Popular Cloud Computing Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.