OWASP SECURETEA TOOL PROJECT

Small IoT (Internet of Things) to notify users via Twitter, whenever someone accesses their laptop. This application uses the touchpad/mouse/wireless mouse to determine activity and is developed in Python and tested on Linux.

The purpose of this application is to warn the user (via various communication mechanisms) whenever their laptop accessed. This small application was developed and tested in python in Linux machine is likely to work well on the Raspberry Pi as well.

Table Of Contents

• Target User
• Objective
• Pre-requisites
• Procedure Installation
• Getting Twitter Tokens
• Getting Twilio Tokens
• Getting Slack Tokens
• Tested on
• Suggestions and contributing
• Code Of Conduct
• Chat Group
• Roadmap

Target User:

It was written to be used by anyone who is interested in Security IoT (Internet of Things) and still needs further development.

How it functions:

• Keep track of the movement of the mouse/touchpad
• Detect who access the laptop with mouse/touchpad is installed
• Send warning messages on Twitter/SMS/Slack/Telegram

Objective:

To alert the user via variuos communication mechanism, whenever his/her laptop had been accessed by someone. And also it can be used to monitor your system.

Pre-requisites:

I. Hardware :

• Linux OS / Raspberry Pi - have sudo access on the terminal/console
• Mouse / Wireless Mouse / Touchpad congenital laptop
• The Twitter application is already installed on the mobile phone (Optional)

II. Software :

• Python - https://www.python.org/ (sudo apt-get install python)
• Angular - https://angular.io/
• A Twitter account - https://twitter.com
• A Twilio account(optional, if SMS service not required)
• Mobile phone, a previously-installed Twitter application (Optional)

Procedure Installation:

1. Python and python-setuptools must be installed. (If not already installed: sudo apt-get install python python-setuptools)

2. Download/Clone repository from: https://github.com/OWASP/SecureTea-Project.git

• git clone https://github.com/OWASP/SecureTea-Project.git

3. Install SecureTea package:

• cd SecureTea-Project
• python setup.py install

4. Install python dependencies/ requirements

• pip install -r requirements.txt

5. Open the "securetea.conf" in your home directory (~/.securetea/securetea.conf) with a text editor and edit the following variables :

Copy/Paste API KEY and TOKEN from Twitter apps

"api_key": "XXXX",
"api_secret_key": "XXXX",
"access_token": "XXXX",
"access_token_secret": "XXXX",
"username": "XXXX"

6. Optionally in "securetea.conf" You can set "debug" : true to enable the console log (default: enabled), or set "debug" : false to disable logging to console.

7. Install Mouse / Wireless Mouse Touchpad if not functioning properly (Linux / macOS / Raspberry Pi machine).

8. Okay, Run program -> sudo SecureTea.py or more -> SecureTea.py -h

9. Notice a WELCOME_MSG Like this: [Core] [ 2018-08-30 16:50 ] Info : Welcome to SecureTea..!! Initializing System

10. Laptop access by moving the mouse/touchpad to see the cumulative X and Y coordinates on the console. If you have a twitter app installed on your phone, you can get updates on the "message" from your twitter account.

11. Checks Alert message on the console and on twitter your inbox. [Core] [ 2018-08-30 16:50 ] Warn : (3) : Someone has access your laptop when

12. If you want to monitor your system from a webapp,

• cd gui
• npm install
• ng serve

13. Click new tab terminal and type -> sudo python monitor.py
14. Go to http://localhost:4200 to view your project. END-POINT type http://localhost:5000 and click SIGN IN.

---

---

---

Getting Twitter Tokens:

• Visit https://apps.twitter.com and "Create new app" to obtain authentication and token codes.

Getting Twilio Tokens:

• Visit https://www.twilio.com and click on "Get a free API key".

Getting Slack Tokens:

• Visit https://api.slack.com/apps/new and create a new bot app.
• In the bot app settings, setup event subscriptions by Enabling Events.
• Install the bot app in the workspace required.
• Get the "Bot User OAuth Access Token", it starts with xoxb-
• Get your user id for the particular workspace.

Tested on:

• TealinuxOS - Worked
• Deepin - Worked
• Raspbian - Worked
• macOS - Worked
• Ubuntu - Worked

Suggestions and Contributing:

• For contributors, please add your name below:
• Ade Yoseman
• Bambang Kurniawan
• Felex kemboi
• Lojislav Bezimenov
• Rejah Rehim
• Ananthu S

Chat Group:

Roadmap:

1. Notify by Twitter
2. Securetea Dashboard / GUI
3. Securetea Protection /firewall
4. Securetea Antivirus
5. Intelligent Log Monitoring
6. Login History
7. Notify by Whatsapp
8. Notify by SMS Alerts
9. Notify by Line
10. Notify by Telegram
    
11. Notify by Slack
    

SecureTea Tool Features	Progress
Notify by Twitter	Yes
Securetea Dashboard	Yes
Notify by Telegram	Yes
Notify by Slack	Yes
Notify by SMS Alerts	Yes