2.5 G-Token Module
The G-Token module manages secure tokens for API access, agent authentication, and deployment across the Guardpot ecosystem, as shown in Figure 2.5-1.

Figure 2.5-1 β G-Token Management Interface
2.5.1 View Modes
The top-right corner of the module provides three view mode options for token management and deployment, as shown in Figure 2.5.1-1.

Figure 2.5.1-1 β G-Token View Mode Selector
View | Description |
|---|---|
Graph | Visual mapping of tokens to associated Guardpots and services |
List | Token creation interface with available token types and created tokens |
Deployment | Mass deployment of G-Tokens to multiple computers via Active Directory |
2.5.2 Graph View
The Graph view provides a visual representation of token relationships across the Guardpot ecosystem, as shown in Figure 2.5.2-1.

Figure 2.5.2-1 β G-Token Graph View
2.5.2.1 Search and Token Selection
The left panel includes a Search tokens... field for locating specific tokens by name. Below the search bar, the token list displays all available tokens for selection.
2.5.2.2 Token Visualization
When no token is selected, the main panel displays the following prompt:
Select a Token Click on a token from the left to view its visualization.
Once a token is selected, the graph view renders a visual node-edge map showing the token's relationships with associated Guardpots, services, and deployment targets.
2.5.3 List View
The List view serves as the primary token creation and management interface, as shown in Figure 2.5.3-1.

Figure 2.5.3-1 β G-Token List View
2.5.3.1 Search Tokens
A Search tokens field at the top of the List view allows you to filter through created tokens by name, making it easy to locate specific tokens in large deployments.
2.5.3.2 Available Token Types
The Create a Token section displays the following token types that can be generated:
Token Type | Icon | Description |
|---|---|---|
Web bug | ![]() | Tracking pixel for web-based interaction monitoring |
QR code | ![]() | QR code token for physical or digital distribution |
Microsoft Excel | ![]() | Malicious Excel document token |
Microsoft Word | ![]() | Malicious Word document token |
Custom EXE / binary | ![]() | Custom executable binary token |
CSS File | ![]() | Cascading Stylesheet token for web tracking |
JavaScript File | ![]() | JavaScript token for web-based interaction |
Kubernetes Profile | ![]() | Kubernetes configuration profile token |
OpenVPN Config | ![]() | OpenVPN configuration file token |
WireGuard Config | ![]() | WireGuard configuration file token |
AD User | ![]() | Active Directory user account token |
AD Group | ![]() | Active Directory group token |
RDP Profile | ![]() | Remote Desktop Protocol profile token |
SSH Profile | ![]() | Secure Shell profile token |
FTP Credential | ![]() | FTP access credential token |
Web Cookie | ![]() | Browser cookie token for session tracking |
2.5.3.3 Created Tokens Section
Below the token type selection grid, the Created Tokens section displays all previously generated tokens. The header shows the total count:
Created Tokens (0)
When no tokens have been created, the following empty state message is displayed:
No tokens created yet. Click on a token type above to create one.
Clicking any token type initiates the token creation workflow, where you configure the token's properties and generate the token value.
2.5.3.4 Token Properties
Each created token includes the following properties:
Property | Description |
|---|---|
Token Name | Identifier for the token |
Token Value | The token string (masked for security) |
Created Date | When the token was generated |
Expiry Date | When the token expires |
Associated Guardpot | Which honeypot the token is linked to |
Permissions | Access level: Read, Write, or Admin |
2.5.3.5 Token Actions
Action | Description |
|---|---|
Regenerate | Generate a new token value while maintaining the same configuration |
Revoke | Immediately invalidate the token, preventing further use |
Delete | Permanently remove the token from the system |
2.5.4 Deployment View
The Deployment view enables mass distribution of G-Tokens to multiple computers through Active Directory integration, as shown in Figure 2.5.4-1.

Figure 2.5.4-1 β G-Token Deployment View
2.5.4.1 Deployment Header
The Deployment view header displays the following description:
G-Token Deployments Deploy G-Tokens to multiple computers via Active Directory
2.5.4.2 Empty State
When no deployments have been configured, the following message is displayed:
No deployments yet Create your first deployment to get started
2.5.4.3 Deployment Toolbar Buttons
The top-right corner of the Deployment view provides two management buttons:
Button | Function |
|---|---|
LDAP Credentials | Manage LDAP connection configurations for deployment targeting |
Create New Deployment | Launch the deployment configuration wizard |
2.5.4.4 LDAP Credentials Management
Clicking the LDAP Credentials button opens the LDAP connection management interface, as shown in Figure 2.5.4.4-1.

Figure 2.5.4.4-1 β LDAP Credentials Management
The header displays current configuration status:
LDAP Credentials Management Manage LDAP connections for deployment targeting
The saved credentials counter shows:
0 saved0 credentials configured
When no credentials are configured, the following empty state is shown:
No LDAP credentials configured yet. Click Add LDAP Credential to get started.
Adding a New LDAP Credential
Click the Add LDAP Credential button to open the configuration form, as shown in Figure 2.5.4.4-2.

Figure 2.5.4.4-2 β New LDAP Credential Form
The form is titled "New LDAP Credential" with the subtitle "Configure a new LDAP connection" and includes the following sections:
Basic Info:
Parameter | Description |
|---|---|
Display Name * | A descriptive name for this LDAP connection (required) |
Connection:
Parameter | Description |
|---|---|
LDAP Server * | Hostname or IP address of the LDAP server (required) |
Port | LDAP service port (default: 389 for plaintext, 636 for SSL) |
SSL / TLS Encryption | Encryption method selection. Options include SSL/TLS or Plaintext β not recommended |
Authentication:
Parameter | Description |
|---|---|
Username / Bind DN * | Distinguished Name for LDAP binding (required) |
Bind Password * | Password for the bind user (required) |
Directory:
Parameter | Description |
|---|---|
Base DN * | Base Distinguished Name for directory searches (required) |
Search Filter | Optional LDAP filter to restrict search results |
2.5.4.5 Creating a New Deployment
Clicking the Create New Deployment button opens the deployment configuration wizard, as shown in Figure 2.5.4.5-1.

Figure 2.5.4.5-1 β Create New Deployment Form
The form is titled "Create New Deployment" with the subtitle "Configure and launch a GToken deployment to LDAP targets" and includes the following sections:
Configuration:
Parameter | Description |
|---|---|
Deployment Name * | A descriptive name for this deployment (required) |
LDAP Credentials * | Select a previously configured LDAP connection (required) |
Target Selection β Search OUs and Groups:
Parameter | Description |
|---|---|
Selected OUs | Organizational Units targeted for deployment. Displays count (e.g., "0 OUs selected") with a "No OUs selected" placeholder when empty |
Selected Groups | Active Directory groups targeted for deployment. Displays count (e.g., "0 Groups selected") with a "No groups selected" placeholder when empty |
File & Path:
Parameter | Description |
|---|---|
Target Path * | Destination path on target machines (e.g., |
File Source * | Choose between Upload New File to provide a new payload or Use Existing G-Token to deploy a previously created token (required) |
















