Decoding Galah, an LLM Powered Web Honeypot
Adel Karimi
DEF CON 32 Creator Stage · Day 1 · Creator Stage
Adel Karimi's talk at DEF CON 32 introduced **Galah**, an innovative **Large Language Model (LLM)-powered web honeypot** designed to dynamically generate realistic HTTP responses. Named after an Australian parrot known for being both smart and dumb—a characteristic Karimi believes mirrors the honeypot's behavior—Galah represents a significant leap from traditional static honeypots. This research focuses on "research honeypots" exposed to the internet to collect intelligence on wide-ranging scan attempts, rather than internal network decoys.