Web Attack Investigation

Tools yang digunakan untuk analysis web apache log :

1. Putty

https://the.earth.li/~sgtatham/putty/latest/w32/putty.exe

2. Winscp

https://winscp.net/download/WinSCP-5.13-Setup.exe

3. Apache log viewer

https://www.apacheviewer.com/ApacheLogsViewer.exe

4. apache-scalp

git clone https://github.com/neuroo/apache-scalp.git

cd /apache-scalp

wget https://raw.github.com/PHPIDS/PHPIDS/master/lib/IDS/default_filter.xml

chmod +x scalp.py default_filter.xml

./scalp.py -l /var/log/apache2/access.log -f ./default_filter.xml -o --output /var/www/portal/scalp --html

5. whois

bgp.he.net

6. chkrootkit

apt-get install chkrootkit