The-Eye
Simple security surveillance script for linux distributions. The Eye can detect possible ARP poisoning, DNS spoofing and suspicous connections(meterpreter/reverse shell/bind shell) on tcp.
Operative system | Version |
---|---|
Ubuntu | * |
Kali linux | * |
Debian | * |
Mint | * |
Arch Linux | * |
Black Arch | * |
Dependencies
sudo apt-get install espeak
ARP Poisoning detector
Checks the arp chache and default gateway continiosly.
DNS Spoof Detector
Checks the /etc/hosts file for unwanted changes.
Suspicous Connection Detector
Monitors the netstat table for suspicous outgoing tcp connections.
Bitcoin: 16GvMV7eZH22p4rLQuu8h2gbgSLYr11KBM