Crassus

Crassus Windows privilege escalation discovery tool Quick start 1. In Process Monitor, select the Enable Boot Logging option. 2. Reboot. 3. Once you have logged in and Windows has settled, run Process Monitor once again. 4. When prompted, save the boot log, e.g., to raw.PML. 5. Reset the default...

guasap-whatsapp-foresincs-tool

Guasap Forensic The Guasap Forensic implemented in Python under the GNU General Public License, for the extraction and analysis of files, data bases and logs for forensic WhatsApp. What it does? 1. Check root in device 2. Extract DB and multimedia files no root 3. Extract and analyze deleted...

NginxHunter

NginxHunter Description NginxHunter is a comprehensive tool designed to analyze Nginx access logs for security vulnerabilities and suspicious activities. It detects SQL injection attempts, scanner tools, sensitive path accesses, exploitation attempts, webshells, and more. Ideal for system...

MasterParser

MasterParser v2.5 Stop wasting time, let MasterParser do the work! Created & Maintained by: Eilay Yosfan What is MasterParser ? MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifical...

nginx_log_check

nginxlogcheck Nginx log security analysis script Features Top 20 address statistics SQL injection analysis Scanner alert analysis Vulnerability exploitation detection Sensitive path access File inclusion attack Webshell Find Top 20 URLs by response length Find rare script file access Find 302...

nginx_log_check

nginxlogcheck Script de análisis de seguridad de registros de Nginx Funcionalidades Estadísticas de las 20 direcciones principales Análisis de inyección SQL Análisis de alertas de escáneres Detección de explotación de vulnerabilidades Acceso a rutas sensibles Ataques de inclusión de archivos...

log-horizon

Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...

CANalyse

CANalyse CANalyse is a tool built to analyze the log files to find out unique datasets automatically and able to connect to simple user interfaces such as Telegram. Basically, while using this tool the attacker can provide a bot-ID and use the tool over the internet through telegram-bot. CANalyse...

deep-loglizer

Deep-loglizer Deep-loglizer is a deep learning-based log analysis toolkit for automated anomaly detection. If you use deep-loglizer in your research for publication, please kindly cite the following paper: Zhuangbin Chen, Jinyang Liu, Wenwei Gu, Yuxin Su, and Michael R. Lyu. Experience Report: De...

ThreatHound

ThreatHound ThreatHound is an advanced cybersecurity tool designed to facilitate efficient threat detection and analysis, windows events logs. it offers a user-friendly interface for managing and analyzing security data. Key features include log analysis, Sigma rule integration, and real-time...

threat-hunting-guide

Corelight Threat Hunting Guide working copy This repository serves as the working data for the Corelight Threat Hunting Guide. The source prose which is maintained here is periodically put through editing, layout, and graphic design, and then published as a PDF file and distributed by Corelight,...

hijackthis

Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...

etl-parser

etl-parser Lector de archivos de registro Event Trace Log en Python puro etl-parser es una biblioteca de análisis pura de Python 3 para archivos de registro ETL de Windows. ETL es el formato predeterminado para ETW así como el formato predeterminado para el registrador del kernel. etl-parser no...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

OSTE-Web-Log-Analyzer

OSTE-Web-Log-Analyzer Automate the process of analyzing web server logs with the Python Web Log Analyzer. This powerful tool is designed to enhance security by identifying and detecting various types of cyber attacks within your server logs. Stay ahead of potential threats with features that...

ZeroLogon-Exploitation-Check

Script to automate Checks for potential exploitation of CVE-2020-1472 aka ZeroLogon in the domain. This is a very "quick and dirty" script that automates some of the leading artifects in determining an actual exploitation of CVE-2020-1472, compiled from multiple blogs. Ideally, the 2nd check for...

citrix-logchecker

citrix-logchecker Parse citrix netscaler logs to check for signs of CVE-2023-4966 exploitation Written by Otmar Lendl. Usage: ./citrix-anomaly.pl -d -v -h -p file -a X logfiles This script parse citrix netscale syslog files and looks for session reconnects that might be the result of a...

reversemap

reversemap Analiza intentos de inyección SQL en registros de servidor web El programa puede ejecutarse en modo batch o en modo interactivo. En modo batch, el programa aceptará registros del servidor web Apache y desofuscará las URLs solicitadas de los registros. En modo interactivo, el programa...

psad

psad - Intrusion Detection with iptables Logs Introduction The Port Scan Attack Detector psad is a lightweight system daemon written in is designed to work with Linux iptables/ip6tables/firewalld firewalling code to detect suspicious traffic such as port scans and sweeps, backdoors, botnet comman...

log4j-finder

log4j-finder A Python3 script to scan the filesystem to find Log4j2 that is vulnerable to Log4Shell CVE-2021-44228 & CVE-2021-45046 & CVE-2021-45105. It scans recursively both on disk and inside nested Java Archive files JARs. How it works log4j-finder identifies log4j2 libraries on your filesyst...