Data verified Apr 2026
ADYour product here. Reach security decision-makers.Launch a campaignbap Description
bap is a webservice honeypot that logs HTTP basic authentication credentials in a 'parser friendly format'. The webservice responds with 401 WWW-Authenticate: Basic realm='ADMIN' for HEAD and GET requests, and generates an error response for other HTTP methods. No valid username/password exists, only credentials are logged. Configuration involves setting HTTP_ADDR and HTTP_PORT in bap.py, with default binding to *:8080. Running bap.py starts the service, while start-bap-debian.sh and stop-bap-debian.sh manage background execution. Logging occurs in pot.log in the same directory as bap.py, with entries in the format: [Date Time] Client_address:Client_port Auth_method Decoded_auth_string.
bap FAQ
Common questions about bap including features, pricing, alternatives, and user reviews.
bap is bap is a webservice honeypot that logs HTTP basic authentication credentials. It is a Security Operations solution designed to help security teams with Log Management.
Have more questions? Browse our categories or search for specific tools.
