Snare is a super next generation advanced reactive honeypot.It is a web application honeypot sensor attracting all sort of maliciousness from the Internet.
Basic Concepts
- Surface first. Focus on the attack surface generation.
- Sensors and masters. Lightweight collectors and central decision maker (tanner).
Getting Started
- You need Python3. We tested primarily with >=3.5
- This was tested with a recent Ubuntu based Linux.
Also Read – RBuster : Yet Another Dirbuster
Steps To Setup
- Get the tool using:
git clone https://github.com/mushorg/snare.gitandcd snare - Install requirements:
sudo pip3 install -r requirements.txt - Setup the tool using :
sudo python3 setup.py install - Clone a page:
sudo clone --target http://example.com - Run SNARE:
sudo snare --port 8080 --page-dir example.com - Test: Visit http://localhost:8080/index.html
- (Optionally) Have your own tanner service running.
Docker Build Instructions
Change current directory to project directory
docker-compose build
docker-compose up
Testing
In order to run the tests and receive a test coverage report, we recommend running pytest:
pip install pytest pytest-cov
sudo pytest –cov-report term-missing –cov=snare snare/tests/
Sample Output
