https://github.com/ahisec/nla

使用 Nuclei 进行日志痕迹检测 辅助蓝队人员检测WEB日志中的攻击痕迹
https://github.com/ahisec/nla

Last synced: 5 days ago
JSON representation

使用 Nuclei 进行日志痕迹检测 辅助蓝队人员检测WEB日志中的攻击痕迹

• Host: GitHub
• URL: https://github.com/ahisec/nla
• Owner: ahisec
• Created: 2024-12-31T07:50:18.000Z (10 months ago)
• Default Branch: master
• Last Pushed: 2024-12-31T08:17:34.000Z (10 months ago)
• Last Synced: 2024-12-31T08:18:39.848Z (10 months ago)
• Size: 0 Bytes
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - ahisec/nla - 使用 Nuclei 进行日志痕迹检测 辅助蓝队人员检测WEB日志中的攻击痕迹 (Others)

README

          
# NLA

使用 Nuclei 进行日志痕迹检测

辅助蓝队人员检测WEB日志中的攻击痕迹

---

## 已支持

- [x] webshell

- [x] oob

- [x] sqli

- [x] useragent

- [x] nacos

- [x] jeecgboot

- [x] wordpress

- [x] hikvision

- [ ] jenkins

- [x] dahua

- [ ] 泛微

- [ ] 致远

- [ ] 金蝶

- [ ] 用友

- [ ] 通达

- [ ] 亿赛通

- [x] Thinkphp

- [x] windows命令

- [x] linux命令

## 用法

```

nuclei -t /rules -u access.log -file

```

## 效果

![image](img/img1.png)

## 注意事项

nuclei默认情况文件大于5 MB（5242880）将不会处理。遇到大文件请先分割。

## 参考链接:

> https://github.com/ffffffff0x/LOG-HUB

> https://github.com/projectdiscovery/nuclei-templates

> https://github.com/wy876/POC

[![Stargazers over time](https://starchart.cc/ahisec/nla.svg?variant=adaptive)](https://starchart.cc/ahisec/nla)