Telnetlogger
This is a simple program to log login attempts on Telnet (port 23). It's designed to track the Mirai botnet. Right now (Oct 23, 2016) infected Mirai machines from around the world are trying to connect to Telnet on every IP address about once per minute. This program logs both which IP addresses are doing the attempts, and which passwords they are using. I wrote it primarily because installing telnetd on a Raspberry Pi wasn't sufficient. For some reason, the Mirai botnet doesn't like the output from Telnet, and won't try to login. So I needed something that produced the type of Telnet is was expecting. While I was at it, I also wrote some code to parse things and extract the usernames/passwords. Usage: Just run the program in order to see passwords and IP addresses appear on stdout. telnetlogger To log the information to files, use the -p and -i options. telnetlogger -p passwds.txt -i ips.txt To listen on another port (for testing and whatnot), use -l. telnetlogger -l 2323 Note that on many systems, you'll get an "access denied" error message, because programs that open ports below 1024 need extra priveleges. So you may need to sudo the program. Compiling Type make or:
FEATURES
SIMILAR TOOLS
A set of interrelated detection rules for improving detection and hunting visibility and context
A bash script for scanning a target network for HTTP resources through XXE
A simple honeypot that opens a listening socket and waits for connection attempts, with configurable reply and event handling
A low interaction Python honeypot designed to mimic various services and ports to attract attackers and log access attempts.
A tool for extracting files from network traffic based on file signatures with support for various file formats and scalable search algorithm.
Exploiting simple stack overflow vulnerabilities using return oriented programming (ROP) to defeat data execution prevention - DEP.
AWS Shield provides managed DDoS protection for your applications, automatically detecting and mitigating sophisticated network-level DDoS events.
Stenographer is a high-performance full-packet-capture utility for intrusion detection and incident response purposes.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.