bap is a webservice honeypot that logs HTTP basic authentication credentials in a 'parser friendly format'. The webservice responds with 401 WWW-Authenticate: Basic realm='ADMIN' for HEAD and GET requests, and generates an error response for other HTTP methods. No valid username/password exists, only credentials are logged. Configuration involves setting HTTP_ADDR and HTTP_PORT in bap.py, with default binding to *:8080. Running bap.py starts the service, while start-bap-debian.sh and stop-bap-debian.sh manage background execution. Logging occurs in pot.log in the same directory as bap.py, with entries in the format: [Date Time] Client_address:Client_port Auth_method Decoded_auth_string.
Common questions about bap including features, pricing, alternatives, and user reviews.
bap is bap is a webservice honeypot that logs HTTP basic authentication credentials. It is a Security Operations solution designed to help security teams with Log Management.
bap is a free Security Operations tool. This makes it accessible for organizations of all sizes, from startups to enterprises. Visit https://github.com/bjeborn/basic-auth-pot/ for download and installation instructions.
Popular alternatives to bap include:
Compare these tools and more at https://cybersectools.com/categories/security-operations
bap is for security teams and organizations that need Log Management. It's particularly suitable for small to medium-sized teams looking for cost-effective solutions. Other Security Operations tools can be found at https://cybersectools.com/categories/security-operations
A comprehensive dashboard for managing and monitoring honeypots with detailed information on attack attempts and connections.
Cloud-native deception platform deploying dynamic security canaries