https://github.com/techathena/veritas

pcap analyser that uses rest api for IP/URL reputation and also for obtaining URL's
https://github.com/techathena/veritas

csv cybersecurity layers network-programming packets pcap pcap-analyser pcap-analyzer python-3 python3 rest-api scapy threat threat-analysis threatcrowd

Last synced: about 2 months ago
JSON representation

pcap analyser that uses rest api for IP/URL reputation and also for obtaining URL's

• Host: GitHub
• URL: https://github.com/techathena/veritas
• Owner: techathena
• Created: 2019-01-24T06:10:30.000Z (almost 6 years ago)
• Default Branch: master
• Last Pushed: 2020-12-01T14:36:38.000Z (about 4 years ago)
• Last Synced: 2024-08-03T17:11:24.737Z (5 months ago)
• Topics: csv, cybersecurity, layers, network-programming, packets, pcap, pcap-analyser, pcap-analyzer, python-3, python3, rest-api, scapy, threat, threat-analysis, threatcrowd
• Language: Python
• Homepage:
• Size: 8.44 MB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-network-stuff - **1**星

README

        
# veritas

This is a python software which reads and analyses pcap files.

This projet uses scapy for reading files  and a lot of other stuff.

It uses whois Reverse IP/DNS API which you can get at https://reverse-ip-api.whoisxmlapi.com/ to get the urls from destination ip adresses.

It uses threatcrowd for IP/URL reputation.You can find it at https://github.com/AlienVault-OTX/ApiV2

Now onto the major modules of the project:

1. testfile :

   This is used to enter the path of the pcap file Which is to be analysed.

2. newtestfile: 

  Its the one which will run the project.It will give you protocols,source IP,destination IP,IP Reputation,URL's accessed in a csv file.

3. file1.csv:

  This is the file which is currently saving the outputs.

4. threatcrowdfeed:

  This will access the threatcrowd api to give the feeds.

5. dealinwithcsv:

  Creates the csv file with outputs

6.getip:

  Gets source and destination IP adresses of a packet as well as the protocols.

7.reverseip:

  Gets the URL's from the Destination IP addresses.

8.filepath.txt:

  stores the path of pcap file to be read

  

  Feel free to contact me for more questions.Just send a pull request!

Note :This is a prototye version of the project.