Home / Threat Defense / Honeypots / Express Honeypot
Express Honeypot

Express Honeypot

Pricing: Free
Write a Review Visit Website
Express Honeypot

What is Express Honeypot

A tool for testing subdomain takeover possibilities at a mass scale.

Express Honeypot: A Tool for RFI and LFI Detection

Express honeypot serves as a honeypot specifically designed for detecting remote file inclusion (RFI) and local file inclusion (LFI) vulnerabilities.

The Objective of This Project

The objective of this project is to identify bots and malware that are scanning websites and attempting to upload remote files. These Remote File Inclusion (RFI) and Local File Inclusion (LFI) bots utilize a collection of Google dorks to search for vulnerable websites on the internet. The Express honeypot employs 310 fake URLs based on RFI and LFI dorks, serving them dynamically. Each request made to any of the honeypot URLs is logged, and the remote file is downloaded and securely stored.

This honeypot is written in JavaScript and uses Express

This honeypot is developed using JavaScript and utilizes Express as its web server framework. A simple logs viewer page can be accessed at the /beekeeper URL, although it currently lacks additional commands. Development is ongoing; however, the core architecture is stable, allowing you to start using it safely. To get started, clone the project and install the necessary dependencies with the following commands: git clone https://github.com/christophe77/express-honeypot cd express-honeypot yarn install. Next, edit the /express/config.js file. The 'Port' setting specifies the port for the web server. 'BeekeeperCredentials' refers to the username and password required to access the /beekeeper page. The 'RemoteFileSave' option allows you to choose whether to save the remote file on your local drive, on dpaste, or on both. Lastly, 'GoogleVerification' is th
 

Express Honeypot Reviews

Write a Review

No reviews yet. Be the first to review this tool!

Write a Review

Share your experience with Express Honeypot tool and help others make informed decisions.

Featured

Specops Software
Free
Password Management

Specops Software View Specops Software

Specops Software empowers organizations to fortify their IT security by addressing the critical vulnerability of password management and authentication. As a premier vendor, Specops Software provides advanced solutions designed to proactively block weak passwords, enforce robust authentication protocols, and ensure compliance with stringent industry standards like CJIS and HITRUST. With deep native integration into Active Directory and on-premises data storage, Specops Software offers unparalleled security and control for sensitive business data.

Active Directory password policy auditing against compliance standards
Breached password detection for over 900 million known compromised passwords
Zero-trust access evaluation and enhancement
Infisical
Free
Password Management

Infisical View Infisical

Infisical is the premier open-source platform designed for unified management of secrets, certificates, and configurations across your entire organization. It seamlessly integrates into your development workflows, CI/CD pipelines, and cloud infrastructure, ensuring secure storage and automated injection of sensitive information. Empower your team with robust features like versioning, point-in-time recovery, comprehensive audit logging, and automated secret rotation for enhanced security and operational efficiency.

Open-source secrets management platform
Unified management of secrets, certificates, and configs
Seamless integration with development workflows and CI/CD
Click Studios
Free
Password Management

Click Studios View Click Studios

Click Studios is an Australian-based Agile software development company dedicated to evolving Passwordstate, their robust Enterprise Password Management solution. Continuously refined through customer insights and cybersecurity advancements, Passwordstate offers advanced features for secure sensitive information management and stringent compliance. Click Studios provides scalable, secure, and user-friendly password management solutions, empowering businesses globally with affordable and reliable access control.

Secure Enterprise Password Management
Continuous Feature Enhancement
Customer Feedback Driven Development

Similar Tools

Tracebit
Free
Honeypots

Tracebit View Tracebit

Tracebit redefines cloud intrusion detection by transforming security challenges into opportunities. Instead of complex rule sets that adversaries can evade, Tracebit deploys unique, anomaly-based decoys designed to be inherently difficult to bypass. This innovative approach generates highly actionable alerts, empowering security teams to detect and respond to threats more effectively while actively hindering adversary progress.

Anomaly-based decoy deployment
Actionable, high-fidelity alerts
Environment-specific decoy profiling
Snare
Free
Honeypots

Snare View Snare

Snare is a robust suite of event monitoring and analysis tools engineered to satisfy stringent auditing and security mandates. It excels at collecting, filtering, and analyzing IT event data, providing essential capabilities for real-time security monitoring, deep-dive analysis, comprehensive auditing, and secure archiving. By delivering actionable insights from your IT infrastructure's events, Snare empowers organizations to proactively identify and mitigate threats, ensure compliance, and maintain a secure operational posture.

Comprehensive IT event collection and filtering
Real-time security monitoring and threat detection
In-depth event analysis for forensic investigations
KFSensor
Free
Honeypots

KFSensor View KFSensor

KFSensor is an intelligent honeypot system engineered for robust intrusion and insider threat detection within Windows environments. It proactively lures and identifies malicious actors by emulating vulnerable system services and trojans, effectively acting as a decoy. Pre-configured to monitor all TCP, UDP, and ICMP traffic, KFSensor provides immediate post-installation network visibility and offers easy customization for simulating additional bespoke services.

Advanced honeypot for intrusion and insider threat detection
Simulates vulnerable services and trojans to attract attackers
Monitors all TCP, UDP, and ICMP ports
xxeserv
Free
Honeypots

xxeserv View xxeserv

Uploader honeypot designed to look like poor website security.

YALIH YALIH
Free
Honeypots

YALIH YALIH View YALIH YALIH

A simple honeypot that collects credentials across various protocols

xss2png
Free
Honeypots

xss2png View xss2png

Helix is a versatile honeypot designed to mimic the behavior of various protocols including Kubernetes API server, HTTP, TCP, and UDP.