Commit Graph

2452 Commits

Author SHA1 Message Date
Michel Oosterhof 4886aa443c
Binary cat (#1382)
* output cat as bytes
* make grep bytes compatible
2020-07-18 22:01:18 +08:00
Michel Oosterhof 5c51342c03
remove apache workbook (#1381) 2020-07-17 13:03:09 +08:00
Michel Oosterhof aa3ddd3dac
Azure sentinel (#1378)
* add header

* add docker and sentinel to index

* list commands correctly

* add workbook

* fix references

* rename file
2020-07-09 22:13:19 +08:00
Michel Oosterhof ec9eb8b2cc
remove unicode characters in cowrie.cfg.dist (#1376) 2020-07-06 21:17:25 +08:00
Michel Oosterhof aeda823241
fix old library (#1375) 2020-07-06 11:29:36 +08:00
Michel Oosterhof a6bdf232d2
fix mysql depnedency for py<3 (#1374) 2020-07-06 11:09:39 +08:00
Michel Oosterhof 79bd5e816f
Dependency upgrade 2020 07 03 (#1372)
* dep upgrade
2020-07-03 15:42:50 +08:00
Michel Oosterhof 2fd7a20076
Tox fixes (#1371)
* pin versions for dev software

* run lint in py37, not py27

* more pur for other requirements files
2020-07-03 15:24:45 +08:00
Michel Oosterhof 98ccb9a7f8
fix flake8 E741 (#1370) 2020-07-03 10:48:52 +08:00
Michel Oosterhof ffa60ba3f2
Flake8 f523 (#1369)
* fix flake8 error F523
2020-07-03 10:35:42 +08:00
Michel Oosterhof f55555b6c6
Nc int (#1368)
* allow `nc 1 1` and a few more checks
2020-07-02 11:16:24 +08:00
Michel Oosterhof ebc9bf8ae9
dependency upgrade Thu Jul 2 10:36:05 +08 2020 (#1367)
* dependency upgrade Thu Jul  2 10:36:05 +08 2020
* fix version of flake8
2020-07-02 11:10:52 +08:00
Guilherme Borges 66eddab75b
Update libvirt version (5.5.0 to 6.4.0) (#1363)
* update python-libvirt to 6.4.0

* minor doc improvement

* remove python 2 reference
2020-06-22 11:19:52 +01:00
Guilherme Borges 982d60df17
fix some bugs in NAT (#1364) 2020-06-22 16:41:05 +08:00
Woongyeol Choi e7952e0de9
ToC update (#1360) 2020-06-08 13:54:29 +08:00
Michel Oosterhof dea7855c33
Sonarcloud 1 (#1358)
* remove duplicate branch

* do check malshare ssl cert
2020-06-01 11:29:34 +08:00
Michel Oosterhof 2ea41be79c
fix exception attributes (#1357) 2020-06-01 11:23:13 +08:00
Michel Oosterhof 8b4003e9d6
string-bytes conversion for py3 (#1356) 2020-06-01 10:56:08 +08:00
Michel Oosterhof d026d0424b
dependency upgrade Thu May 14 14:11:21 +08 2020 (#1352) 2020-05-15 11:11:20 +08:00
Michel Oosterhof 4beccf24c6
remove libvirt from tox (#1353) 2020-05-15 11:04:52 +08:00
Michel Oosterhof b6fb25dedb
some small linting fixes (#1351)
* small linting fixes for new version of flake8
* format string fix
* expand single letter variable names
2020-05-15 10:27:02 +08:00
Michel Oosterhof 02e8e24493
Hpfeeds3 hex2 (#1350)
* use hex() rather than encode('hex') to avoid UTF parsing failures
2020-05-11 11:00:38 +08:00
Michel Oosterhof 53ddb8d7d7
get ready for releae (#1349) 2020-05-10 23:38:03 +08:00
Benjamin Stephens a7dd5f5d20
Abuseipdb plugin (#1346)
* Added section for AbuseIPDB plugin
* Create abuseipdb.py
* replace abuseipdb instructions with reference to its pull request page on github

Co-authored-by: -8 <57877722+hyfn8@users.noreply.github.com>
2020-05-07 14:17:59 +08:00
Michel Oosterhof 84e726895c
add warning for py2.7 (#1348) 2020-05-05 12:33:52 +08:00
Michel Oosterhof b8e0df92f6
remove py34 support from tox (#1347) 2020-05-05 10:52:10 +08:00
Matej Dujava c825c12032
add nproc txt command, unify procesor info in lscpu and /proc/cpuinfo (#1343)
Signed-off-by: Matej Dujava <mdujava@kocurkovo.cz>
Co-authored-by: Matej Dujava <mdujava@kocurkovo.cz>
2020-05-05 10:08:22 +08:00
Michel Oosterhof edf4d01626
dependency upgrade Mon May 4 13:33:04 +08 2020 (#1344)
* dependency upgrade Mon May  4 13:33:04 +08 2020
* add version for treq
2020-05-05 10:07:44 +08:00
Michel Oosterhof 0af58f906d
fix issues with zlib@openssh.com on py3 (string/bytes) (#1342) 2020-05-01 09:39:46 +08:00
Fosocles e252bc8ef6
Add help and version content for awk.py (#1341)
* Update awk.py
2020-04-30 16:32:56 +08:00
Michel Oosterhof 3babdfcddb
Awk (#1339)
* awk
2020-04-27 16:26:42 +08:00
Michel Oosterhof b08a430f74
fix dd behaviour for blocksize without size qualifier (#1338) 2020-04-27 12:34:09 +08:00
Matej Dujava ccd5ab0f76
add command tee and implement option - (stdin) for cat (#1327)
* add option - (stdin) in cat command
* implement new command tee
* add tests for cat and tee

by: Matej Dujava <mdujava@kocurkovo.cz>
2020-04-22 10:13:10 +08:00
asr 8f1d386ced
HTTPS + Credentials + GeoIP support in Elasticsearch output (#1329)
* add credentials and https support in elasticsearch output
* add new options (creds + https) for elasticsearch output
* change default document type in elasticsearch output, add some extra infos
* add index checking in es output
* add geoip mapping in es output
* add function to setup geoip pipeline in es output


Co-authored-by: Alban Siffer <alban.siffer@irisa.fr>
2020-04-20 21:07:55 +08:00
Benjamin Stephens b21bcfabde
Added an event trigger to the twisted reactor: calls output plugins' stop() methods before shutting down (#1334)
Added reactor event trigger at instantiation - reactor calls stop() before shutting down

Co-authored-by: -8 <57877722+hyfn8@users.noreply.github.com>
2020-04-18 10:48:59 +08:00
Gavin Spearhead 72677eb8e8
Fixed handling of -h parameter in wc command, and added -v parameter (#1333)
* Fixed handling of -h parameter in wc command, and added -v parameter

Co-authored-by: Gavin Spearhead <gavinspearhead@gmail.com>
2020-04-16 10:17:52 +08:00
Matej Dujava 114cd489cd
fix cat --help, handle cat without arguments (#1326)
Signed-off-by: Matej Dujava <mdujava@redhat.com>
2020-04-07 12:54:50 +08:00
Michel Oosterhof 4fe9d0a5df
honeyfs docs (#1324) 2020-04-03 14:20:06 +08:00
Michel Oosterhof 077aaba7f1
dependency upgrade Wed Apr 1 09:08:33 +08 2020 (#1321) 2020-04-01 09:33:44 +08:00
Michel Oosterhof d3d602ca6b
put hpfeeds3 in default config file (#1322) 2020-04-01 09:33:04 +08:00
Jesse Bowling 62abf94669
Update hpfeeds3 plugin to use config named hpfeeds3 (#1304) 2020-04-01 09:18:46 +08:00
Michel Oosterhof cc6da43ba6
Lint fixes (#1319)
* fix linter

* fix indent

* indent more
2020-03-27 14:09:39 +00:00
Matthias 5689817f97
Add misp output (resolves #1306) (#1317)
* Introduce MISP output plugin

* Add cfg dist settings

* Remove non-needed test code

* Rename misp output class and add final newline to config

* Introduce compatibility to Python 2 and 3

* Update new event text

* Adjust for latest PyMISP API changes and introduce debug

As the PyMISP API deprecated the upload_sample method, we now need to do this manually.
Also, a settings switch for debug output was introduced.

* Add requirements compat for 2 and 3 and introduce publish switch

* Linting and code style update
2020-03-27 13:59:04 +00:00
cryptax fd6ff4a423
Working ELK setup for 7.6.1 (#1316)
* Working ELK setup for 7.6.1

* adding custom prompt option

Co-authored-by: axelle <aapvrille@fortinet.com>
2020-03-27 13:51:31 +00:00
Michel Oosterhof c3ba2cf6ef
fix #1311 (#1312) 2020-03-09 12:26:10 +00:00
cryptax 029507ba77
updated doc for ELK 7.6.0 (#1310) 2020-03-09 12:21:45 +00:00
Michel Oosterhof fbf9be75b1
remove reference to python2 (#1302) 2020-02-10 20:19:00 +00:00
Michel Oosterhof 8b6df7e255
disable crash reporter by default (#1299) 2020-02-07 15:58:32 +00:00
Maximilian 7148580ca6
Fixed default vaules for S3 Output (#1296) 2020-01-31 15:12:42 +00:00
Michel Oosterhof cc7d1a8922
dependency upgrade Tue Jan 21 07:27:12 CET 2020 (#1292) 2020-01-21 13:37:14 +01:00