PWN Spoof – Create Realistic Spoofed Log 2023

today in this tutorial we have an amazing tool for all of you which can give you fake spoof logs by generating. pwnSpoof (from Punk Security) generates realistic spoofed log files for familiar web servers with customizable attack scenarios. Every log bundle is unique and completely customizable, making it perfect for developing CTF scenarios and training serials.

Let’s take a look!!

Installation

It is quite easy to deploy this tool in any kali Linux operating system. First, we need to clone the repository from GitHub via the git clone command, enter the directory and that’s it. Now we can operate this tool with the help of the “python3” utility.

1 2 3

git clone https://github.com/punk-security/ cd pwnspoof python pwnspoof.py --help

Like other tools, it also has a help command which we can use to find the use case of this tool.

IIS Spoof Fake Logs

We’re excited to see how impressive results we get with this tool. So first we try to generate fake IIS logs against a website and we get successful. As you can see below it has generated all the logs in order which looks very real.

1

python3

NGINX logs

You can also specify your server name if you want to generate server wise logs.

1	python3 pwnspoof.py banking --server-fqdn test.php.com --attack-type command_injection --server-type NGINX

Attackers IP Address

This feature will allow us to create spoof logs with different IP addresses so that the logs look impressive

1	python3 pwnspoof.py banking --spoofed-attacks 3 --iocs

Certified Ethical Hacker, information security analyst, penetration tester, and researcher.