Log Parser

Log Parser H is a flask powered web app that displays log entries.

User Guide

• To view all the available options, navigate to /
• To view all traffic list with the unique ips, countries and hits, navigate to /traffic
• To view all sql injections attacks with their entries, navigate to /sqli_exploit
• To view all LFI attack attempts with their entries, navigate to /lfi_exploit
• To view all RFI attack attempts with their entries, navigate to /rfi_exploit

Installation

Log Parser H requires Pipenv to run.

!Note, you need to have the zipfile file inside log_parser_h before running anything

Install the dependencies and run the build script. The script will take care of db creation and parsing before running the app.

$ cd log_parser_h
$ pipenv install
$ sh build.sh
$ python runserver.py

Installation via Docker

Log Parser H can also be installed via Docker by default, the Docker will expose port 80, change this within the Dockerfile if necessary.

note: the build takes a while due to the parsing of the logs

$ cd log_parser_h
$ docker build -t logparser .

Once done, run the Docker image and map the port to wherever you wish.

docker run -d -p 5000:80 logparser

Verify the deployment by navigating to your server address in your preferred browser.

127.0.0.1:5000

Development

It's recommended to use konch with ipython in cases where you need app context to debug

Todos

• Write a ReactJS frontend
• Upload a proper docker container for it

License

MIT