https://github.com/ekultek/soapy
log file scrubber
https://github.com/ekultek/soapy
hiding log-file-scrubbing log-files post-exploitation
Last synced: 5 months ago
JSON representation
log file scrubber
- Host: GitHub
- URL: https://github.com/ekultek/soapy
- Owner: Ekultek
- Created: 2018-07-18T15:01:11.000Z (about 7 years ago)
- Default Branch: master
- Last Pushed: 2018-07-27T14:08:12.000Z (about 7 years ago)
- Last Synced: 2025-04-07T05:11:11.648Z (6 months ago)
- Topics: hiding, log-file-scrubbing, log-files, post-exploitation
- Language: Python
- Size: 10.7 KB
- Stars: 16
- Watchers: 2
- Forks: 5
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
###### _As mentioned at the HOPE conference 2018_
This repo is apart of the [warmind project](https://github.com/Project-WARMIND) for a clone of the code see [here](https://gist.github.com/Ekultek/e3dbccb1464b98ae0d5a2e33acfdb821) or you can get the code from [here](https://github.com/ekultek/soapy). For a version you can download with `curl`/`wget` see [here](https://gist.githubusercontent.com/Ekultek/e3dbccb1464b98ae0d5a2e33acfdb821/raw/3b93cb9f9578e61bb774d687c4673a8823d80e16/soa.py).
# Scenario
Post exploitation tools are far and in between, they are used after you have successfully exploited a system and need to either;
- Do some things, pull hashes, ip addresses, etc.
- Map the network
- Anything that has to do with being on the network itself that you don't want to be caught doing
What soa.py does is create a sort of `container` that will host a root terminal shell while the log files are being monitored (default logs: `/var/log`). After you have completed your session, the log files are scrubbed back to the second soa.py was launched.
# Commands
Soapy has a few available commands for you to pass:
```bash
usage: sudo soa.py [-n|-l|-d] PATH|DIR1 DIR2 ...
optional arguments:
-h, --help show this help message and exit
-l PATH, --log PATH pass the path to log files (*default=/var/log)
-d DIR1 DIR2 ... [DIR1 DIR2 ... ...], --dirs DIR1 DIR2 ... [DIR1 DIR2 ... ...]
provide directories that you want files deleted out of
afterwards (*default=None)
-n, --no-prompt delete the files in the provided directory without
prompting for deletion (*default=raw_input)
```
# Demo video
[](https://vimeo.com/280556246)