A remote data analysis and classification service that evaluates HTTP requests and emulates vulnerabilities for honeypot systems.
TANNER is a remote data analysis and classification service that evaluates HTTP requests and emulates application vulnerabilities for honeypot systems like SNARE. It analyzes incoming traffic to identify malicious patterns and provides realistic responses to deceive attackers, helping security researchers study attack methodologies. The service classifies events and serves search engine dorks to enhance the luring capabilities of associated honeypots.
Security researchers, cybersecurity professionals, and organizations deploying honeypots to study attack patterns and improve their defensive strategies. It's particularly useful for those using the SNARE honeypot ecosystem.
Developers choose TANNER for its specialized vulnerability emulation capabilities and seamless integration with SNARE, providing a realistic deception environment. Its modular design allows easy extension with new analysis techniques, making it flexible for custom security research scenarios.
He who flays the hide
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses multiple application vulnerability type techniques to provide deceptive responses, as highlighted in the README for studying attack patterns.
Powers SNARE's luring capabilities by serving search engine dorks, attracting malicious traffic effectively for honeypot systems.
Allows security researchers to easily add new emulation and analysis modules, supporting flexible custom research scenarios.
Specifically designed to evaluate SNARE events and compose responses, making it a core component of the SNARE honeypot ecosystem.
Requires separate installations of Redis, PHP Sandbox, and Docker, adding significant overhead and potential configuration issues, as detailed in the Getting Started section.
Primarily serves the SNARE honeypot, limiting usability with other honeypot systems without extensive modifications, reducing general applicability.
The documentation badge shows 'latest', but setup instructions are brief and assume Ubuntu-based Linux, lacking guidance for other platforms or advanced deployments.