With this application, it is aimed to accelerate the incident response processes by collecting information in linux operating systems.
Features
Information is collected in the following contents.
/etc/passwd
cat /etc/group
cat /etc/sudoers
lastlog
cat /var/log/auth.log
uptime/proc/meminfo
ps aux
/etc/resolv.conf
/etc/hosts
iptables -L -v -n
find / -type f -size +512k -exec ls -lh {}/;
find / -mtime -1 -ls
ip a
netstat -nap
arp -a
echo $PATH
Installation
git clone https://github.com/anil-yelken/pylirt
cd pylirt
sudo pip3 install paramiko
Usage
The following information should be specified in the cred_list.txt file:
IP|Username|Password
sudo python3 plirt.py
