galah
galah copied to clipboard
Add Support for Generating Non-Text Content Types
Support the generation of non-text content types such as application/octet-stream
, application/pdf
, application/zip
, image/jpeg
.
This feature will broaden the range of outputs, enabling more versatile use cases. For instance, it can be used as URL honeytokens that generate specific content types on the fly when the token is accessed (Note: Accessing a URL honeytoken, even without returning content, is sufficient to trigger an alert. But we can inject breadcrumbs and other honeytokens into generated content (e.g., PDF, DOC, etc.) to further monitor the attacker’s actions.).