SMTPLLMPot - A super simple GPT3.5 based SMTP emulator/honeypot
reddit / selfhosted

----------------------------------------------------------------------
referefref · 2023-12-01 05:16

I'm currently working on a book about deception technologies, and
while writing a section on the application of LLMs in honeypot
creation (low architectural overhead, adaptability to customer data,
unique means for fingerprinting and exploitation) I put together a
very simple GPT3.5 based SMTP honeypot system as a PoC. Figured I'd
share it all with you.

[https://github.com/referefref/SMTPLLMPot](https://github.com/referefr
ef/SMTPLLMPot)

​

There are several unique attacks worth considering here, most of which
are already covered off by Mitre's top 10 for LLMs
([https://owasp.org/www-project-top-10-for-large-language-model-
applications/assets/PDF/OWASP-Top-10-for-
LLMs-2023-v1\_1.pdf](https://owasp.org/www-project-top-10-for-large-
language-model-applications/assets/PDF/OWASP-Top-10-for-
LLMs-2023-v1_1.pdf)), and one that is super trivial but effective -
that is, a token overflow and improper sanitisation of error messages.