You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Orion is a TCP/IP Forensics Tool, written in C, capable of detecting malicious processes / connections by using the VirusTotal API.
2
+
3
+
<divalign=center>
4
+
5
+
6
+
____ ___ ____ ____ _ __
7
+
/ __ \ / _ \ / _// __ \ / |/ /
8
+
/ /_/ // , _/_/ / / /_/ // /
9
+
\____//_/|_|/___/ \____//_/|_/
10
+
11
+
12
+
Author: B0lg0r0v
13
+
https://arthurminasyan.com
14
+
15
+
</div>
16
+
17
+
## Description
18
+
Orion is a TCP/IP forensics tool, written in C, capable of detecting malicious processes / connections by using the VirusTotal API.
19
+
20
+
*Example Output:*
21
+
```
22
+
ORION v0.1
23
+
Author: B0lg0r0v
24
+
https://arthurminasyan.com/
25
+
26
+
PROCESS NAME: firefox.exe (PID: 16004)
27
+
Local Port: 54219
28
+
Remote Addr: 3.221.32.141:443 --> [SAFE]
29
+
Local Port: 54784
30
+
Remote Addr: 140.82.114.26:443 --> [SAFE]
31
+
32
+
PROCESS NAME: GitHubDesktop.exe (PID: 32856)
33
+
Local Port: 55370
34
+
Remote Addr: 40.84.185.67:9354 --> [SAFE]
35
+
36
+
PROCESS NAME: ServiceHub.SettingsHost.exe (PID: 28828)
37
+
Local Port: 55452
38
+
Remote Addr: 140.82.112.25:443 --> [SAFE]
39
+
40
+
PROCESS NAME: firefox.exe (PID: 16004)
41
+
Local Port: 55555
42
+
Remote Addr: 185.199.109.133:443 --> [SAFE]
43
+
```
44
+
45
+
## Features
46
+
47
+
More Features on its way..
48
+
49
+
## Credits & Disclaimer
50
+
This project is heavily inspired and taken from [@SaadAhla](https://github.com/SaadAhla) "IP Hunter".<br><br> This tool is primarly created for me as a project to enhance my coding skills and start creating some hacking tools. It is not considered to be the most efficient tool out there.<br><br>
0 commit comments