Sign in Book a Demo

bap

Threat Defense Honeypots

Pricing: Free

Visit Website ↗

bap

What is bap

Repository of plugins for the Honeycomb honeypot framework

bap is a webservice honeypot that captures HTTP basic authentication credentials

bap is a webservice honeypot designed to log HTTP basic authentication credentials in a format that is easy for parsers to process.

The Webservice Issues a 401 WWW-Authenticate Response

The service responds with a Basic realm='ADMIN' for both HEAD and GET requests, and it generates an error response for any other HTTP methods. There are no valid username/password combinations available, and only the credentials used are logged. Configuration requires setting the HTTP_ADDR and HTTP_PORT in the bap.py file, with the default binding set to *:8080. When you run bap.py, it starts the service. The scripts start-bap-debian.sh and stop-bap-debian.sh are used to manage the service's background execution. Logging is performed in pot.log, which is located in the same directory as bap.py. Log entries follow this format: [Date Time] Client_address:Client_port Auth_method Decoded_auth_string.

bap Reviews

No reviews yet.

Similar Tools

Paid
Honeypots

Tracebit

Tracebit automatically deploys security canaries across your cloud accounts, endpoints, SaaS applications, and CI/CD pipelines at scale. When attackers touch them, you know immediately.

Free
Honeypots

Snare

Snare is a robust suite of event monitoring and analysis tools engineered to satisfy stringent auditing and security mandates. It excels at collecting, filtering, and analyzing IT event data, providing essential capabilities for real-time security monitoring, deep-dive analysis, comprehensive auditing, and secure archiving. By delivering actionable insights from your IT infrastructure's events, Snare empowers organizations to proactively identify and mitigate threats, ensure compliance, and maintain a secure operational posture.

Comprehensive IT event collection and filteringReal-time security monitoring and threat detectionIn-depth event analysis for forensic investigations
Free
Honeypots

KFSensor

KFSensor is an intelligent honeypot system engineered for robust intrusion and insider threat detection within Windows environments. It proactively lures and identifies malicious actors by emulating vulnerable system services and trojans, effectively acting as a decoy. Pre-configured to monitor all TCP, UDP, and ICMP traffic, KFSensor provides immediate post-installation network visibility and offers easy customization for simulating additional bespoke services.

Advanced honeypot for intrusion and insider threat detectionSimulates vulnerable services and trojans to attract attackersMonitors all TCP, UDP, and ICMP ports
Free
Honeypots

xss2png

Helix is a versatile honeypot designed to mimic the behavior of various protocols including Kubernetes API server, HTTP, TCP, and UDP.

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

Start Your 7-Day Free Trial Book a Live Demo

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by