Pylirt - Python Linux Incident Response Toolkit

By: noreply@blogger.com (Unknown)

With this application, it is aimed to accelerate the incident response processes by collecting information in linux operating systems.

Features

Information is collected in the following contents.

/etc/passwd

cat /etc/group

cat /etc/sudoers

lastlog

cat /var/log/auth.log

uptime/proc/meminfo

ps aux

/etc/resolv.conf

/etc/hosts

iptables -L -v -n

find / -type f -size +512k -exec ls -lh {}/;

find / -mtime -1 -ls

ip a

netstat -nap

arp -a

echo $PATH

cd pylirt

sudo pip3 install paramiko

The following information should be specified in the cred_list.txt file:

IP|Username|Password

sudo python3 plirt.py

Download Pylirt