# Mimicry | Security Tool For Active Deception In Exploitation And Post-Exploitation

**URL:** <https://onehack.st/t/mimicry-security-tool-for-active-deception-in-exploitation-and-post-exploitation/234931>\
**Category:** Tools & Scripts\
**Tags:** programming, hacking\
**Created:** [March 24, 2023, 10:19pm UTC](https://onehack.st/t/mimicry-security-tool-for-active-deception-in-exploitation-and-post-exploitation/234931 "2023-03-24T22:19:19Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [March 24, 2023, 10:19pm UTC](https://onehack.st/t/mimicry-security-tool-for-active-deception-in-exploitation-and-post-exploitation/234931/1 "2023-03-24T22:19:19Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/d/e/dee8f102808946911eef35b4273bff2a1f76a049.png)

Mimicry is a security tool developed by Chaitin Technology for active deception in exploitation and post-exploitation.

Active deception can live migrate the attacker to the honeypot without awareness. We can achieve a higher security level at a lower cost with Active deception.

## 🔥 Demo

[![asciicast](https://camo.githubusercontent.com/f7d1eec43145bdcb70b16ff1aa10798039df8dd4cc10ad600d64ead616fd53d7/68747470733a2f2f61736369696e656d612e6f72672f612f33574f33783164347478344b4862347077626b424c67356c682e737667)](https://asciinema.org/a/3WO3x1d4tx4KHb4pwbkBLg5lh)

## 🕹 Quick Start

### 1. Make sure docker, docker-compose is installed correctly on the machine

```auto
docker info
docker-compose version

```

### 2. Install [honeypot service](https://github.com/chaitin/mimicry/tree/master/mimicry/honeypot)

```auto
docker-compose build
docker-compose up -d

```

### 3. Deploy [deception tool](https://github.com/chaitin/mimicry/tree/master/mimicry/tools) on other machines

```auto
update config.yaml,replace ${honeypot_public_ip} to the public IP of honeypot service

```

### 4. Perform Webshell deceiving

```auto
./mimicry-tools webshell -c config.yaml -t php -p webshell_path

```

## 📝 Advance Usage

| Tool | Description |
| --- | --- |
| [Web-Deception](https://github.com/chaitin/mimicry/blob/main/docs/web-deception.md) | Fake vulnerabilities in web applications |
| [Webshell-Deception](https://github.com/chaitin/mimicry/blob/main/docs/webshell-deception.md) | live migrate webshell to the honeypot |
| [Shell-Deception](https://github.com/chaitin/mimicry/blob/main/docs/shell-deception.md) | live migrate ReverseShell/BindShell to the honeypot |

## 🏘 Contact Us

1. You can make bug feedback and feature suggestions directly through GitHub Issues.
2. You can join the discussion group on [Discord](https://discord.gg/KjQGUrG8aJ) .

## GitHub:

> **[GitHub - chaitin/mimicry: Mimicry is a dynamic deception tool that actively...](https://github.com/chaitin/mimicry)**
>
> Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.