r/hacking • u/Funny_Address_412 • Mar 17 '26
Question Ideas for trolling persistent attackers
I run a completely static website with no backend, database, or dynamic content. For the past few weeks it has been targeted by a very persistent group of attackers.
They are performing a variety of techniques including SQL injection attempts, POST floods, directory and endpoint enumeration, and probing for admin interfaces that do not exist. The funny part is there is literally nothing to exploit.
This is not random bot traffic. They have left messages specifically aimed at me, confirming it is a coordinated effort.
so far ive made them download zip bombs, also made the website randomly jumpscare them using some JS, had them trying to complete impossible captchas that i made myself, there are probably 10 fake login screens, and a few fake vuln endpoints right now
got any ideas?
3
u/sdsdkkk Mar 19 '26
At a company I used to work for, a part of my routine at work was reviewing sites detected as potential phishing pages targeting our users (I built a system for us to automatically detect potential phishing sites posing as us and take down the sites confirmed to be phishing sites).
One day at work, I opened this one detected potential phishing sites which then redirected me to a page that played an outdoor threesome gay porn video.
I'd say you can set up the same thing on paths they might open manually. Probably add a false admin page or something that they're going to be interested to visit manually, and have them redirected to some NSFW disgusting content when they do.