为什么值得关注

与仅在泄露后才发出信号的蜜罐令牌相比，它能在更早的阶段（本地与诱饵交互）进行检测，且无需特权即可运行于通常缺少 EDR 或文件访问监控的个人工作站上。

适合谁使用

安全研究人员和红队成员
macOS/Linux 工具和包的开发者
关注供应链攻击对个人工作站影响的个人用户
评估低权限检测机制的系统管理员

典型使用场景

在 npm install 或其他包管理器期间检测凭据窃取
监控开发者机器上对云配置文件（如 AWS、GCP）的未授权访问
在受保护会话中运行高风险命令（例如来自不可信源的命令），并设置凭据命令绊网
识别尝试读取浏览器钱包或令牌的信息窃取器或被感染的扩展

项目优势

默认无特权运行（macOS 和 Linux 上使用 FIFO 诱饵无需 root）
可重新武装的 FIFO 诱饵，在阻塞读取时发出信号，并在读取器关闭后自动重置
可自定义诱饵包（云、身份、开发者等）和精确文件/套接字诱饵路径
受保护会话提供虚假 HOME、缩减的环境和凭据命令伪装，以诱捕凭据收集工具

使用前须知

仅检测与活动陷阱交互的行为；不观察所有凭据访问或识别恶意软件
虚假 HOME 重定向常见路径但并非隔离；绝对路径、直接 API 和同用户篡改可绕过
FIFO 诱饵作为命名管道可见，非阻塞读取器可避免延迟；fanotify 后端需要 CAP_SYS_ADMIN 权限

README 快速开始

Stinger

Stinger is an experimental endpoint deception tool for individual macOS and Linux workstations. It places decoy resources at likely collection points and records when a process interacts with them.

Malicious packages, compromised extensions, and infostealers can collect tokens, keys, browser data, or wallet material in a single run. On personal workstations, EDR and privileged file-access monitoring are often absent, while many canary tokens do not signal until collected bait is later rendered, fetched, resolved, or used. Stinger targets an earlier point: local interaction with the decoy during collection.

Main features:

Watch Mode creates standing, non-destructive file and socket tripwires in the user's normal HOME while stinger watch runs. Its default file baits are FIFOs that signal on a blocking read and re-arm after the reader closes. Optional local-service baits cover additional collection paths.
Protected Sessions run a selected command or shell with a fake HOME, reduced environment, decoy resources, and credential-command tripwires. A trap can stop the protected process scope.
Bait controls include built-in packs, custom file paths, exact exclusions, and JSON configuration.
Events and response provide structured local events and reports. Depending on the mode and backend, Stinger can delay or deny an interaction or stop a protected process scope.

Both modes are unprivileged by default. Linux also has an experimental fanotify backend that denies opens of exact bait files.

Stinger is not a sandbox or general endpoint monitor. It detects interaction with active traps; it does not observe all credential access, identify malware, or contain hostile code.

Install

Requirements:

Go 1.25 or newer
macOS or Linux
FIFO support for Protected Sessions and the default Watch Mode backend

go install github.com/0x4D31/stinger/cmd/stinger@latest
stinger doctor
stinger doctor --selftest

From a checkout:

go build -o stinger ./cmd/stinger
./stinger doctor --selftest

The examples below assume stinger is on PATH. Use ./stinger for a local build.

Quickstart

# Inspect the default standing baits, then start Watch Mode.
stinger watch --dry-run
stinger watch

# Run one command or an interactive shell in a protected session.
stinger run -- npm install
stinger run -

项目描述

Unprivileged endpoint deception for macOS and Linux workstations. Uses FIFO baits, other local traps, and protected sessions to detect secret collection as it happens.

stinger