# Pylirt | Python Linux Incident Response Toolkit

**URL:** <https://onehack.st/t/pylirt-python-linux-incident-response-toolkit/229522>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, windows\
**Created:** [December 8, 2022, 12:21am UTC](https://onehack.st/t/pylirt-python-linux-incident-response-toolkit/229522 "2022-12-08T00:21:48Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [December 8, 2022, 12:21am UTC](https://onehack.st/t/pylirt-python-linux-incident-response-toolkit/229522/1 "2022-12-08T00:21:48Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/8/3/834bfa2e3542b883dc526c7c955d1f0e5852c033.jpeg)

# Pylirt - Python Linux Incident Response Toolkit

Tested Kali 2022.1

## Description

With this application, it is aimed to accelerate the incident response processes by collecting information in linux operating systems.

## Features

Information is collected in the following contents.

/etc/passwd

cat /etc/group

cat /etc/sudoers

lastlog

cat /var/log/auth.log

uptime/proc/meminfo

ps aux

/etc/resolv.conf

/etc/hosts

iptables -L -v -n

find / -type f -size +512k -exec ls -lh {}/;

find / -mtime -1 -ls

ip a

netstat -nap

arp -a

echo $PATH

## Installation

git clone [https://github.com/anil-yelken/pylirt](https://github.com/anil-yelken/pylirt)

cd pylirt

sudo pip3 install paramiko

## Usage

The following information should be specified in the cred\_list.txt file:

IP|Username|Password

[![](https://github.com/anil-yelken/pylirt/raw/main/creds_list.jpg)](https://github.com/anil-yelken/pylirt/blob/main/creds_list.jpg)

sudo python3 plirt.py

[![](https://github.com/anil-yelken/pylirt/raw/main/pylirt.jpg)](https://github.com/anil-yelken/pylirt/blob/main/pylirt.jpg)

## Contact

> [https://twitter.com/anilyelken06](https://twitter.com/anilyelken06)
> 
> [https://medium.com/@anilyelken](https://medium.com/@anilyelken)

## GitHub:

[https://github.com/anil-yelken/pylirt](https://github.com/anil-yelken/pylirt)