rpriven
b0679267d7
A fake "Acme Corp" support bot with deliberately weak defenses, for demonstrating prompt-injection attacks and basic hardening. Includes a 3-level defense progression (none -> instruction -> output filter), full JSONL logging, a live attack-attempt feed, and light/dark mode. All "secrets" are fake demo values. For authorized security education only. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
8 lines
470 B
Text
8 lines
470 B
Text
# Intentional fake demo credentials in this security-education repo.
|
|
# The "database URL" is a deliberately planted fake secret the demo bot leaks:
|
|
# postgres://demo:fake_demo_pw@db.example.internal:5432/customers
|
|
# It is not a real credential. These fingerprints suppress the postgres-connection
|
|
# rule for those known, intentional lines only.
|
|
attack-transcripts.md:postgres-connection:13
|
|
attack-transcripts.md:postgres-connection:35
|
|
server.ts:postgres-connection:17
|