Popular repositories Loading

1. OverWatch OverWatch Public

   OverWatch is a small forensics and monitoring tool designed to log command-line activity for targeted users on the Solaris 10 operating system. It operates by intercepting system calls and is inten…

   C

2. EvilSunCheck EvilSunCheck Public

   This is a little Python script to detect the "EvilSun" vulnerability (CVE-2020-14871) on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module (PAM) `pam_un…

   Python

3. Cabbage Cabbage Public

   Cabbage is a simple python-based wrapper designed to automate and simplify post-mortem analysis of Solaris 10 kernel crash dumps and uncover evidence of rootkits and malicious activity.

   Python

4. WebLogHunter WebLogHunter Public

   WebLogHunter is a tool for parsing and analysing web server access logs to detect suspicious activity. It normalises logs into a standard DataFrame format for efficient querying and applies risk-sc…

   Python

5. WuTamp WuTamp Public

   WuTamp is a forensic tool designed to parse corrupted `wtmpx` and `utmpx` files from Solaris hosts. Attackers may intentionally corrupt these log files, sometimes by inserting bytes at the beginnin…

   C