BW-Pot

Threat Defense Honeypots

Pricing: Free

Visit Website ↗

BW-Pot

What is BW-Pot

A webapp for displaying statistics about your kippo SSH honeypot.

BW-Pot (Breakable Web Applications HoneyPot) - An Interactive Security Tool

BW-Pot (Breakable Web applications honeyPot) is a highly interactive honeypot that focuses on HTTP or HTTPS traffic. It monitors access from attackers by creating web applications that are easy to target and compromise.

It forwards logs to Google BigQuery for analysis and visualization

It forwards logs to Google BigQuery for accumulation and visualization. This includes features such as frequent attack target web application environment usage, daily automatic restoration to a clean environment, real-time log integration with Google BigQuery, automatic log rotation, and saving packet capture files for detailed analysis. It is operable on low-spec servers. Architecture/Specification: Please refer to the architecture diagram and detailed specifications.

Installation

Hardware Requirements: 2GB RAM, 10GB SSD, and an Internet Connection. Software Requirements: Docker, Docker-Compose, and logrotate. Service Account Requirements: A Google Cloud Platform Account. Usage: Analyze logs that are sent to BigQuery using SQL execution in BigQuery's WebUI. You can also create dashboards by specifying BigQuery tables as data sources in the data portal. Licenses: Apache License v2 for Docker, Fluentd, and Apache Tomcat; GPL v2 for Wireshark (tshark), WordPress, and phpMyAdmin; BSD License for WOWHoneypot. Author: graneed. ToDo: Add Drupal to the list of web applications, store network capture files in /data/tshark/dump/ for download and inspection with WireShark, and for log preservation, consider using Amazon S3.

BW-Pot Reviews

No reviews yet.

Similar Tools

Paid
Honeypots

Tracebit

Tracebit automatically deploys security canaries across your cloud accounts, endpoints, SaaS applications, and CI/CD pipelines at scale. When attackers touch them, you know immediately.

Free
Honeypots

Snare

Snare is a robust suite of event monitoring and analysis tools engineered to satisfy stringent auditing and security mandates. It excels at collecting, filtering, and analyzing IT event data, providing essential capabilities for real-time security monitoring, deep-dive analysis, comprehensive auditing, and secure archiving. By delivering actionable insights from your IT infrastructure's events, Snare empowers organizations to proactively identify and mitigate threats, ensure compliance, and maintain a secure operational posture.

Comprehensive IT event collection and filteringReal-time security monitoring and threat detectionIn-depth event analysis for forensic investigations
Free
Honeypots

KFSensor

KFSensor is an intelligent honeypot system engineered for robust intrusion and insider threat detection within Windows environments. It proactively lures and identifies malicious actors by emulating vulnerable system services and trojans, effectively acting as a decoy. Pre-configured to monitor all TCP, UDP, and ICMP traffic, KFSensor provides immediate post-installation network visibility and offers easy customization for simulating additional bespoke services.

Advanced honeypot for intrusion and insider threat detectionSimulates vulnerable services and trojans to attract attackersMonitors all TCP, UDP, and ICMP ports
Free
Honeypots

xss2png

Helix is a versatile honeypot designed to mimic the behavior of various protocols including Kubernetes API server, HTTP, TCP, and UDP.

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by