bap is a webservice honeypot that captures HTTP basic authentication credentials
bap is a webservice honeypot designed to log HTTP basic authentication credentials in a format that is easy for parsers to process.
The Webservice Issues a 401 WWW-Authenticate Response
The service responds with a Basic realm='ADMIN' for both HEAD and GET requests, and it generates an error response for any other HTTP methods. There are no valid username/password combinations available, and only the credentials used are logged. Configuration requires setting the HTTP_ADDR and HTTP_PORT in the bap.py file, with the default binding set to *:8080. When you run bap.py, it starts the service. The scripts start-bap-debian.sh and stop-bap-debian.sh are used to manage the service's background execution. Logging is performed in pot.log, which is located in the same directory as bap.py. Log entries follow this format: [Date Time] Client_address:Client_port Auth_method Decoded_auth_string.