First off, I apologize for the lack of posts here lately, I’ve been trying to come up with something good to post, because I’m just not a fan of rehashing things other blogs post, or commenting on news stories. Hopefully I’ll be able to contribute more soon Now down to the real post, NSM-Console 0.7 […]
In my never-ending quest to find justification for writing NSM-Console, I hereby present the following tutorial on how to decode the SANS Christmas packet challenge using nothing but NSM-Console: I’m going to be using NSM-Console version 0.4-DEVEL, which adds the features that allow this analysis to be performed without external tools. You can get the […]
Yep, I’ve just been cranking out code lately, so I am proud to present the 0.3 release of nsm-console! You can download NSM-Console here: http://writequit.org/projects/nsm-console/files/nsm-console-0.3.tar.gz This release was focused a bit more on usability, features and bugfixes rather than the addition of new modules, however, there were still a couple that were added. Since this […]
Well, I’ve been working on this for the last week or so, trying to get it all working the way I wanted, and after around 15 takes, I finally have a screencast for anyone interested in the idea behind and usage of nsm-console. The version of nsm-console used in the screencast is the 0.3-DEVEL version. […]
Here’s a list of all the planned modules and completed (struck-out) modules for nsm-console: (if a module is struck out, it’s because I’ve finished making a module for it, it isn’t necessarily in the tarball for download) aimsnarf ngrep (gif/jpg/pdf/exe/pe/ne/elf/3pg/torrent) tcpxtract tcpflow chaosreader bro-IDS snort tcpdstat capinfos tshark argus ragator racount rahosts hash (md5 & […]
Well, I’ve been hard at work for the last couple of days working on a (hopefully) useful tool for aiding in NSM file analysis (for pcap files, live analysis doesn’t work). Behold! I present NSM-Console! (read more about it here, watch a screencast here) Download the framework here. Keep in mind this framework only includes […]