#goaccess

Sunday Round up for the week ending the 7th of May 2017:

Articles:

How to install GoAccess web log analyzer with Nginx on Linux or Unix: https://www.cyberciti.biz/faq/how-to-install-goaccess-web-log-analyzer-with-nginx-on-linux-or-unix/amp/

EAPHammer - Targeted Evil Twin Attacks Against WPA2-Enterprise Networks [Indirect Wireless Pivots Using Hostile Portal Attacks]: http://www.kitploit.com/2017/05/eaphammer-targeted-evil-twin-attacks.html?utm_source=dlvr.it&utm_medium=facebook&m=1

Multi-Honeypot Platform: T-Pot: https://n0where.net/a-multi-honeypot-platform/

Contents in sparse mirror may be smaller than they appear: http://www.hecfblog.com/2017/05/contents-in-sparse-mirror-may-be.html

HTTP Headers... the Achilles' heel of many applications: https://isc.sans.edu/diary.html

A New Era in Endpoint Protection: https://www.sans.org/reading-room/whitepapers/clients/era-endpoint-protection-37770

mimipenguin - A Tool To Dump The Login Password From The Current Linux User: http://www.kitploit.com/2017/05/mimipenguin-tool-to-dump-login-password.html?utm_source=dlvr.it&utm_medium=facebook&m=1

Twitter:

"WikiLeaks Reveals CIA Tool ‘Scribbles’ For Document Tracking" #informationsecurity #feedly https://t.co/CWGRjMpopY

— The Security Sleuth (@Security_Sleuth) April 30, 2017

"Kali Linux can now use cloud GPUs for password-cracking" #infosec #feedly https://t.co/ofE0mSiToz

— The Security Sleuth (@Security_Sleuth) April 30, 2017

"Who is Publishing NSA and CIA Secrets, and Why?" #infosec #feedly https://t.co/wU0ghgm08q

— The Security Sleuth (@Security_Sleuth) May 1, 2017

"Disambiguate “Zero-Day” Before Considering Countermeasures" #forensics #feedly https://t.co/pWFpzk7oDj

— The Security Sleuth (@Security_Sleuth) May 2, 2017

"Malware Hunter — Shodan's new tool to find Malware C&C Servers" #infosec #feedly https://t.co/ZJnzuPwJ4r

— The Security Sleuth (@Security_Sleuth) May 2, 2017

"A Dangerously Convincing Google Docs Phishing Scam Is Spreading Like Crazy [Updated]" #cars #feedly https://t.co/UxIyTqsXx4

— The Security Sleuth (@Security_Sleuth) May 3, 2017

"Hundreds of Apps Using Ultrasonic Signals to Silently Track Smartphone Users" #infosec #feedly https://t.co/lsZjG32Hl1

— The Security Sleuth (@Security_Sleuth) May 3, 2017

"Forging Voice" #infosec #feedly https://t.co/ghRdeP1B5F

— The Security Sleuth (@Security_Sleuth) May 4, 2017

Read last weeks round up here

How to Install GoAccess on Ubuntu 16.04

GoAccess is an interactive log viewer and its more than just a viewer. I would say, its a piece of art to show you whats happening on your site in real time. There are still things which i have yet to explore in GoAccess and i will keep sharing tips as i find something worth sharing. For now, here is the simple installation process on Ubuntu 16.04 and a few tips which you might need after…

https://www.goaccess.io/

GoAccess es un analizador de registro web de código abierto en tiempo real y visualizador interactivo que se ejecuta en un terminal en sistemas * nix. Proporciona estadísticas HTTP rápidas y valiosas para los administradores de sistemas que requieren un servidor de informes visuales sobre la marcha.

Caracteristicas:

GoAccess analiza el archivo de registro web…

需要检索日志中出现500和404的地方，之前通过终端或Sublime，现在需要一个工具，能快速把日志处理一遍，找了一个安装配置方便的工具GoAccess

下载：http://www.goaccess.io

比如Mac下

1、安装  brew install goaccess

2、配置goaccess.conf，增加日志时间格式，比如tomcat可以加入这三行（参考这里 http://www.lqmo.cn/archives/83）

time_format %H:%M:%S date_format %d/%b/%Y log_format %h %^[%d:%t %^] "%r" %s %b "%R" "%u" 3、使用 goaccess -f 日志文件路径 -a >xxxx.html，打开页面就是基本信息统计。

GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly.

直接在 terminal 中使用的 real-time website access.log 分析，讓人心動的其中一點是效能，下面是官方的效能測試數據。