SNORT GUI

[WhiteHatCyberus]

Summary

• Bug Fixes, Improved Performance.
• Security Patches and enhanced abstraction.

Detailed Summary

1. Bug Fixes, Improved Performance:

• the previous version of SNORT rule generator consisted of incomplete modules due to commit fault. It has been resolved and currently optimized for use.
• The run snort module had exception errors, majority exceptions in the entire application has been handled to prevent messy verbose in the terminal.

2. Security Patches and enhanced abstraction

• This version's major change is its new zero trust security feature.
• All modules require a password to run, this password is set up during installation and will be your linux sudo password.
• Exception, the Run SNORT module will prompt a 'One Time Password' to the user whenever they launch the module. This OTP which is only known to the user that launched SNORT can only stop snort execution.

Note This was done to prevent bad agents from attempting to turn off SNORT monitoring using the sudo password.

• Abstraction has been a priority to reduce normal user's exposure to the application's back-end resources.

Future Updates:

• Data Hiding: We will be implementing hiding the resources folder and its contents for enhanced security.

Note All administrator credentials are stored locally within the system. To reset administrator credentials, proceed to reinstall the application

Installation:

Warning Do not move installer.py outside the snortgui folder, this leads to total crash of application.

• Install the application by running

sudo python3 installer.py

• All resources and packages are now downloaded.
• Manually launch the SNORT GUI:

sudo python3 snortgui.py

---

Miscellaneous

What's Changed

• Attacker by @Thej7 in Attacker #2

New Contributors

• @Thej7 made their first contribution in Attacker #2

Full Changelog: v1.0...v1.1

---

This discussion was created from the release SNORT GUI.