OWASP SecureTea: one-stop security solution for various devices

OWASP SecureTea

The OWASP SecureTea Project provides a one-stop security solution for various devices (personal computers/servers / IoT devices).

This application uses the touchpad/mouse/wireless mouse to determine activity and is developed in Python and tested on various machines (Linux, Mac & Windows).

The purpose of this application is to warn the user (via various communication mechanisms) whenever their computer/server accessed. This small application was developed and tested in python in Linux machine, macOS & Windows.

TARGET USER

It was written to be used by anyone who is interested in Security IoT (Internet of Things) and still needs further development.

HOW IT FUNCTIONS

• Keep track of the movement of the mouse/touchpad
• Detect who access the laptop with mouse/touchpad is installed
• Send warning messages on Twitter/SMS/Slack/Telegram

Features

•  Intrusion Detection System
  SecureTea Intrusion Detection System (IDS) deals with the following attack vectors and logs any abnormalities. It blacklists and whitelists attackers based on eligibility based RL method:Detect probe (reconnaissance) attacks (performed for information gathering)
  • General scans: TCP ACK & TCP Window, UDP, ICMP scans
  • Stealth scans: FIN, XMAS, NULL scans
  • OS fingerprinting scans

  Detect Denial of Service (DoS) & Remote to Local (R2L) attacks

  • DoS attacks
  • CAM Table Exhaustion
  • DHCP Exhaustion
  • Man in The Middle (MiTM) / ARP cache poisoning
  • SYN flood attack
  • Ping of death
  • Land attack
  • Wireless
    • Deauthentication attack
    • Hidden node attack
    • SSID spoofing
    • Fake access point

  Generate a report about the malicious IP address using OSINT tools The report will contain the following fields:

  1. Reverse DNS
  2. Geo lookup
  3. WHOIS lookup
  4. Other important details
•  Firewall
•  AntiVirus
•  Server Log Monitor
•  System Log Monitor
•  Local Web Deface Detection & Prevention System
•  Auto Web Server Patcher
•  Insecure Headers Detection
•  IoT Anonymity Checker
•  Auto Report Generation Using OSINT
•  Notifying Suspicious Activities Using Various Mediums (Twitter, Telegram, Slack, Gmail, SMS, AWS)
•  Interactive GUI For Ease Of Setting Up

Install & Use

Copyright (c) 2019 OWASP SecureTea-Project Team – http://owasp.org