Nikto is able to detect the honeypot.

[Parth1811]

I tried scanning the SNARE server with Nikto and it was able to detect that it was a python/aiohttp server and not an Nginx server. I think it would be great if we can fix this.

Command:

nikto --host 0.0.0.0

Output:

- Nikto v2.1.5
---------------------------------------------------------------------------
+ Target IP:          0.0.0.0
+ Target Hostname:    0.0.0.0
+ Target Port:        80
+ Start Time:         2020-03-06 19:03:50 (GMT5.5)
---------------------------------------------------------------------------
+ Server: nginx/1.3.8
+ The anti-clickjacking X-Frame-Options header is not present.
+ Cookie sess_uuid created without the httponly flag
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Server banner has changed from 'nginx/1.3.8' to 'Python/3.6 aiohttp/3.6.2' which may suggest a WAF, load balancer or proxy is in place
+ OSVDB-27487: Apache is vulnerable to XSS via the Expect header
+ OSVDB-5292: /filemanager/filemanager_forms.php?lib_path=htt

[glaslos]

Duplicate of #7