express-honeypot

Express Honeypot is a honeypot tool designed to detect and log remote file inclusion (RFI) and local file inclusion (LFI) attacks against web applications. It functions by serving fake URLs generated from a list of known vulnerable paths, dynamically logging any malicious requests, and downloading the attempted remote files for analysis. Key features include a lightweight log viewer and the ability to customize monitored URLs, making it an effective solution for catching and studying automated scanning bots.