Arania release



Arania aims to be a security tool to analize your web logs searching for
remote code inclusion, and download de code, hash it for future
analisys.

For now, it works stable with Mambo or Joomla, i'm looking for logs in
other web aplications to test it and improve.

to download it :

http://code.google.com/p/arania/

to run in apache logs from mambo :

tail -f /route/to/apache/logs | grep osCon | ./arania1 > arania.log


Comments are welcome!


Best regards!!!!

--
Hugo Francisco González Robledo
Instituto Tecnológico de San Luis Potosí

Llave pública en http://www.honeynet.org.mx
Llave pública en http://ardilla.zapto.org

Preguntale a Google-Earth donde estoy :
http://ardilla.zapto.org/ubicaHugo.kml

-------------------------------------------
Educación es lo que queda después de olvidar
lo que se ha aprendido en la escuela.
Albert Einstein
-------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------



Relevant Pages

  • Re: hacked
    ... > I found a zipfile I know I did Not download as I just ... > shows no virus and I watched my zonealarm pro change on me ... > tonight by itself from disabled logs to enabled. ... > I was addressing some mails, all by itself it would type ...
    (microsoft.public.security)
  • Re: OLC - Action Needed
    ... to download secure logs from my Volkslogger since participating in the ... OLC and have previously had no problems. ... It is frustrating, though, having made a great flight and having to ... Volkslogger files now download in seconds using SeeYou and no problems (so ...
    (rec.aviation.soaring)
  • Re: How do I repair lsass.exe ?
    ... Download, install, update and do a full scan with these free malware ... To see the Event Viewer logs, click Start, Settings, Control Panel, ... The most interesting logs are usually the Application and System. ... Some are excusable at startup time when Windows is booting. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Windows Upadates fail to load
    ... You might only find that in other logs and it might only appear there ... then select to download & install and nothing happens. ... [ClientId = MicrosoftUpdate] ...
    (microsoft.public.windowsupdate)
  • Capture cancelling of file download dialog?
    ... [I've a pass through ASP page capturing calls to a download component ... that doesn't logs activity and which I can't edit. ... a cancel by the user means the d/l count is 1 ...
    (comp.lang.javascript)