Arania aims to be a security tool to analize your web logs searching for remote code inclusion, and download de code, hash it for future analisys.
For now, it works stable with Mambo or Joomla, i'm looking for logs in other web aplications to test it and improve. to download it : http://code.google.com/p/arania/ to run in apache logs from mambo : tail -f /route/to/apache/logs | grep osCon | ./arania1 > arania.log Comments are welcome! Best regards!!!! -- Hugo Francisco González Robledo Instituto Tecnológico de San Luis Potosí Llave pública en http://www.honeynet.org.mx Llave pública en http://ardilla.zapto.org Preguntale a Google-Earth donde estoy : http://ardilla.zapto.org/ubicaHugo.kml ------------------------------------------- Educación es lo que queda después de olvidar lo que se ha aprendido en la escuela. Albert Einstein ------------------------------------------- ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
