Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/bocajspear1/honeyhttpd
HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.
https://github.com/bocajspear1/honeyhttpd
honeypot honeypot-http http-server malware-analysis python python-web python-web-server
Last synced: about 1 month ago
JSON representation
HoneyHTTPD is a Python-based web server honeypot/service imitation builder. Great for honeypots or faking HTTP services.
- Host: GitHub
- URL: https://github.com/bocajspear1/honeyhttpd
- Owner: bocajspear1
- License: mpl-2.0
- Created: 2016-12-10T23:27:07.000Z (about 8 years ago)
- Default Branch: master
- Last Pushed: 2024-06-29T20:33:18.000Z (6 months ago)
- Last Synced: 2024-08-01T17:30:36.514Z (4 months ago)
- Topics: honeypot, honeypot-http, http-server, malware-analysis, python, python-web, python-web-server
- Language: Python
- Homepage:
- Size: 89.8 KB
- Stars: 41
- Watchers: 1
- Forks: 16
- Open Issues: 7
-
Metadata Files:
- Readme: README.md
- License: LICENSE.txt
Awesome Lists containing this project
- awesome-honeypots - honeyhttpd - Python-based web server honeypot builder. (Honeypots)
- awesome-honeypots - honeyhttpd - Python-based web server honeypot builder. (Honeypots)
- fucking-awesome-honeypots - honeyhttpd - Python-based web server honeypot builder. (Honeypots)
- awesome-honeypot - **9**星 - based web server honeypot builder. (<a id="a53d22b9c5d09dc894413453f4755658"></a>未分类)
README
# HoneyHTTPD
HoneyHTTPD is a Python-based web server framework. It makes it easy to set up fake web servers and web services, respond with the precise data you want, and record the requests given to it. HoneyHTTPD allows you to build your responses with Python at the HTTP protocol level to imitate almost any server or service you want. No complex setups and proxies required!
This information can be logged to different places, the currently supported outputs are:
* Files
* ElasticSearch
* Stdout
* AWS S3
HoneyPoke supports both Python 2.7 (I know its EOL, but just in case) and Python 3.
## Installation
1. Clone or download this repo
2. Install dependencies:
* Python 2: `sudo pip install -r requirements.txt`
* Python 3: `sudo pip3 install -r requirements.txt`
3. Be sure the `large` and `logs` directories are writeable by the user and group you plan to have HoneyHTTPD running under.
## Setup
1. Copy `config.json.default` to `config.json` Modify the config file.
* `loggers` enables and disables loggers. This done with the `active` key under the respective loggers. Some may need extra configuation, which is in the `config` key.
* `servers` contains a list of servers you want to run. Each entry has the following keys:
* `handler` indicates the server module in the `servers` directory to use for that port
* `mode` is either `http` or `https` which indicates if the server should return normal HTTP or HTTPS
* `port` is the port to run on
* `domain` indicates the "domain" this server is running
* `timeout` is the timeout for requests
* `cert_path` is only required when in `https` mode. This is the path to the server certificate in the PEM format.
* `user` is the user you want the script to drop privileges to
* `group` is the group you want the script to drop privileges to
2. Run HoneyHTTPD with:
* Python 2 `sudo python2 start.py --config config.json`
* Python 3 `sudo python3 start.py --config config.json`
## Making Server Modules
Server modules live in the `servers` directory. They are classes that handle the HTTP requests. These modules must inherit from the `Server` class in `lib.server`. The class name and the name of the server module file must be the same. Modules can inherit from other server modules to build on their functionality.
## Generating SSL certificates
```
openssl req -new -x509 -keyout server_key.pem -out server_cert.pem -days 365 -nodes
```
From [here](https://gist.github.com/dergachev/7028596).
## Contributing
Go at it! Open an issue, make a pull request, fork it, etc.
## License
This project is licensed under the Mozilla Public License, v2.0 (formerly GPL 3.0)