Table of Contents DISSECT or GROK? Or both? Use DISSECT to process data Dissect pattern the term example DISSECT key modifier Right padding modifier (->) Additional modifier ( + ) Add order modifiers (+ and /n) Named skip key(?) Reference keys (* and & amp;) Use GROK to process data Grok pattern regular expression example […]
Tag: grok
Grok-backdoor: A powerful Python backdoor tool that supports Ngrok tunneling
About Grok-backdoor Grok- backdoor is a powerful Python backdoor tool that supports Ngrok tunneling. The tool is developed based on Python and uses Ngrok tunneling to realize C & C communication. It is worth mentioning that the current version of Grok- backdoor supports using Pyinstaller to generate Windows, Linux and Mac backdoor source code. Function […]
Filter’s four major plugins (grok, date, mutate, mutiline)
Four plugins for Filter 1. grok regular capture plug-in 1. The concept of grok 2. Built-in regular expression call 3. Commonly used constants Networking paths Months: January, Feb, 3, 03, 12, December Days: Monday, Tue, Thu, etc… Years? Syslog Dates: Month Day HH:MM:SS Shortcuts Log formats Log Levels 3. Custom expression call grammar example Two, […]
ELK + Filebeat deployment and logstash four plug-ins (grok, date, mutate, multiline)
Table of Contents Filebeat Filebeat combined with logstash brings benefits: Fluentd ELK + Filebeat deployment 1. Install Filebeat & Httpd 2. Set up filebeat’s main configuration file 4. Create a new Logstash configuration file on the node where the Logstash component is located 5. Browser access http://192.168.60.12:5601 to log in to Kibana The four major […]
Intranet Penetration – Tunnel Construction & Ngrok and Frp Intranet Penetration
Write the directory title here 1 Introduction 1.1. Introduction to Tunnel Technology 1.2. Proxy Technology Introduction 1.2.1. Forward proxy 1.2.2. Reverse proxy 1.2.3. Transparent proxy 1.2.4. The difference between forward proxy and transparent proxy 2. Intranet penetration 2.1. Ngrok 2.1.1. Accessing Ngrok 2.1.2. Proxy Settings 2.1.2.1. Open proxy 2.1.2.2. Configure Tunnel 2.1.2.3. Download client 2.1.3. […]
Security testing of social engineering tools – Seeker and ngrok
Preface: This tool is purely a Proof of Concept (PoC) for cybersecurity educational purposes only. Its main purpose is to tell everyone not to easily click on unknown links and grant key permissions, otherwise you may expose your device information or even your location. 1. Principle introduction: As a high-precision geographic location tracking tool, Seeker […]
Centos7 builds Ngrok intranet penetration
1. Install gcc and git (for downloading ngrok source code) yum install gcc -y yum install git -y 2. Install the go language environment yum install -y mercurial git bzr subversion golang golang-pkg-windows-amd64 golang-pkg-windows-386 3. Check the installation environment git –version //( >= 1.7 ) go version 4. Build Ngrok service on the server 1), […]
Logstash: Do you like Grok?
Author: Jo?o Duarte Grok (verb) To understand (something) intuitively or empathetically. One of the most common tasks when parsing log data is breaking down lines of raw text into a set of structured fields that other tools can manipulate. If you’re using the Elastic Stack, you can leverage Elasticsearch’s aggregations and Kibana’s visualizations to answer […]
Intranet Security – Intranet Roaming Socks Proxy (ngrok&frp)
Intranet roaming Socks proxy basic knowledge Intranet Penetration Ngrok Test Demonstration – Two Intranet Communications Go Online Intranet penetration Frp self-built springboard test – two intranet communications go online Basic knowledge Simple knowledge of internal and external networks: The intranet ip address is a private ip address (10/8, 172.16/12, 192.168/16), otherwise it is the external […]
[Solved] Under ngrok’s implementation of intranet penetration window, the Vue project invalid host header error is reported
Purpose: To make your own local vue project accessible on the Internet. Local access: http://localhost:8080/ External network access: Generate a link through ngrok, which can be accessed in other network environments. Installation under windows 1. Register and download ngrok. When registering, you need a verification code. Sometimes you can’t log in and use the external […]