All notable changes to this project will be documented in this file.
#2019-08-02
- Added dependency of Pyfiglet for banner printing
- Removed one-off search capability. If you want new search items create an issue to have me add it to the config
- Added parsing of passwd files to highlight users with shell access
- Added a few more keywords
- Removed vFeed db dependency. Updated documentation for this change.
- Updated License
- Added additional indicators and updated README and Documentation
- Updated code to make it compatible with Python3
- Added identification of cgi scripts
- Added one-off specialized search option of vFeed based off text_search function.
- Added more mime type options
- Hashed each file in supplied directory and saved to its own results file
- Updated output formatting
- Improved formatting for output file for vFeed results
- Updated trommel.py to include output directory location for results file
- Added more keywords to indicators_config.py
- Added vFeed Snort and Nmap results capability
- Separate output file for vFeed results
- Updated trommel.py to include one-off user specified keyword search
- Updated indicators.py & indicator_config.py to include print off files in /opt directory
- Updated trommel.py to include a check for vFeed database. If doesn't exist, program exits.
- Updated Documentation.md and README.md
- Updated trommel.py, indicators.py, and indicator_config.py to print and write instruction set architecture based on the busybox binary
- Added a argument to search binary files for indicators. By default it only searches plain text files.
- Updated mime regex search string in indicator_config.py. Thanks to my colleague @woytek
- Updated the description.
- Added a instruction set architecture check based on the byte offsets in ELF executable. Currently, just checks Busybox binary.
- Updated indicators.py to include regex searches for version numbers of BusyBox, Dropbear (late 2011 or newer), and lighttpd.
- Created this Changelog.md file.
- Updated indicators.py to include byte offsets for (most) indicator hits in non-plain text files.
- Updated indicators.py to make output grep-able.
- Updated indicators.py to make output grep-able.
- indicators.py was created and contains the searching functions.
- indicator_config.py was created and contains all the indicators for searching.
- trommmel.py was made into a loader.
- Created Documentation.md
- TROMMEL was uploaded to GitHub.