Scripts written by @sudoheader
These scripts were written with the intention to extract HoneyBOT Packet Data and convert it into readable ASCII.
Take a look at this:
Notice how the Packet Data column includes data that is trailing beyond our view. The only readable ouputs are SYN, ACK, FIN, and an empty line. My scripts (especially HoneyBOT_h2a.sh) are designed to take that data and convert hexadecimal to ASCII.
NOTE: Take a look at hex2ascii.sh. This script can convert for any hexadecimal output as long as it's not a hexdump.
Another way to do this manually:
- Run
hex2ascii_clip.sh. You will need to havexclipinstalled in order to run this properly. - Copy and paste the hexadecimal content you wish to convert.
- The script should then put the converted contents into your clipboard. For example:
./hex2ascii_clip.shwill wait for you to paste hexadecimal data and the script will paste it into your clipboard, after pressing enter.
You'll need the .csv file generated from HoneyBOT. For instance, HoneyBOT generates a file of the form Log_YYYYMMDD.csv. Log_20220628.csv is provided as an example.
HoneyBOT_Packet_Data.txt needs to be in the directory when running this script.
I have converted part of the Log_20220628.csv, called HoneyBOT_Packet_Data.txt for this reason so the .csv file is not necessary for the script to run. HoneyBOT_Packet_Data.txt contains all data from the Packet Data column in Log_20220628.csv.
Check Packet_Data_output.txt for more details, because this is the basis for running the script HoneyBOT_h2a.sh.
HoneyBOT_h2a.sh works as it was intended. Run as:
./HoneyBOT_h2a.shand you'll see a stream of data converting all of HoneyBOT_Packet_Data.txt in ~4 seconds in your terminal. By default, it will output in .csv format.
You can also run:
./HoneyBOT_h2a.sh > output.txtor
./HoneyBOT_h2a.sh > output.csvto save the converted output of HoneyBOT_Packet_Data.txt to either format of your choosing.
