What we know
honeyTLS is a bash script that sets up Bro (Zeek) together with a JA3 script for Bro and Nginx, used as a simple honeypot to capture JA3 hashes (SSL/TLS client fingerprints). It also documents an alternative one-liner for skimming JA3 fingerprints directly off the wire.
Evidence limits
This description reflects only what is documented on the archived repository page; current behavior, maintenance, or availability have not been independently verified.
Sources and provenance
- honeytls
archived-repository-primary-page · 2026-10-04
Reviewed: 2026-10-04. This record may change when new evidence is found.