SeedPuller / Palware

threat finder/ WebSite Security Assistant written in Python

Warning

• This application is under development and may cause errors. DO NOT use in Production Mode, yet.

About

• Palware is a threat finder/ WebSite Security Assistant wich :
  • Finds and alert/block malicious files like Web Shellers , Backdoors and etc.
  • Monitors all executed commands then find and alert malicious commands (like reading passwd)
  • Finds and alert/block SQLI & XSS testing on website (even POST requests)
  • Block IP adresses Manually
  • Block attacker(s) IP(s) automatically
  • Can send emails for alerts . So you can be informed anytime !

How-To

• Installation
  • Debian Based Distro's . (Tested on Ubuntu)
    • Requirements : sudo apt -y install python3 ; sudo apt -y install git
    • Install & Run : git clone https://gitlab.com/SeedPuller/palware.git ; cd palware ; sudo chmod +x palware.sh;./palware.sh
  • RedHat Based Distro's. (Tested on CentOs)
    • Requirements : sudo yum -y install https://centos7.iuscommunity.org/ius-release.rpm ; sudo yum -y install python35u ; sudo yum -y install gcc make ; sudo yum -y install git
    • Install & Run : git clone https://gitlab.com/SeedPuller/palware.git ; cd palware ; sudo chmod +x palware.sh;./palware.sh
  • Note : You should edit palware.conf (in "inc" folder) and replace your virtual hosts configuration file path .

Note

• For Sending email attention , you must turn on "Access for less secure apps" on your sender gmail : HERE
• Run palware.sh with root. otherwise, script wont work properly .
  • sudo chmod +x palware.sh;./palware.sh

Contact Me

• Help Me To Improve : [e-mail]