Posts

Showing posts with the label Elasticsearch

Ache - A Spider Web Crawler For Domain-Specific Search

Image
ACHE is a focused spider web crawler. It collects spider web pages that satisfy around specific criteria, e.g., pages that belong to a given domain or that comprise a user-specified pattern. ACHE differs from generic crawlers inward feel that it uses page classifiers to distinguish betwixt relevant in addition to irrelevant pages inward a given domain. Influenza A virus subtype H5N1 page classifier tin ship away live from a elementary regular seem (that matches every page that contains a specific word, for example), to a machine-learning based classification model. ACHE tin ship away also automatically larn how to prioritize links inward social club to efficiently locate relevant content spell avoiding the retrieval of irrelevant content. ACHE supports many features, such as: Regular crawling of a fixed listing of spider web sites Discovery in addition to crawling of novel relevant spider web sites through automatic link prioritization Configuration of dissimilar types o...

Stretcher - Tool Designed To Assistance Pose Opened Upwards Elasticsearch Servers That Are Exposing Sensitive Information

Image
Stretcher is a tool to search for opened upward elasticsearch servers. Usage: python stretcher.py --shodan {key} --action analyze --threads {0..100} --dork python stretcher.py --help _____ __ __ __ / ___// /_________ / /______/ /_ ___ _____ \__ \/ __/ ___/ _ \/ __/ ___/ __ \/ _ \/ ___/ ___/ / /_/ / / __/ /_/ /__/ / / / __/ / /____/\__/_/ \___/\__/\___/_/ /_/\___/_/ Tool designed to assist position incorrectly Applications that are exposing sensitive [+] Interesting indexes were constitute payment, address, email, user Browser: http://34.224.104.129:80 Organization: Amazon.com Hostnames: ec2-34-224-104-129.compute-1.amazonaws.com Domains: amazonaws.com City: Ashburn Country: U.S.A. Status: Without authentication (Open) Installation $ sudo pip3 install pyfiglet shodan elasticsearch $ cd $HOME/ $ git clone https://github.com/6IX7ine/stretcher/ $ sud...

Malice - Virustotal Wanna Move (Now Alongside 100% To A Greater Extent Than Hipster)

Image
Malice's mission is to live a costless opened upwards source version of VirusTotal that anyone tin give notice role at whatever scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker Getting Started (OSX) Install $ brew install maliceio/tap/malice Usage: malice [OPTIONS] COMMAND [arg...] Open Source Malware Analysis Framework Version: 0.3.11 Author: blacktop - <https://github.com/blacktop> Options: --debug, -D Enable debug trend [$MALICE_DEBUG] --help, -h demo assistance --version, -v impress the version Commands: scan Scan a file lookout Watch a folder lookup Look upwards a file hash elk Start an ELK docker container plugin List, Install or Remove Plugins assistance Shows a listing of commands or assistance for i ascendancy Run ...

Redelk - Tardily Deployable Tool For Cherry-Red Teams Used For Tracking Too Alarming Nigh Blueish Squad Activities Equally Good Equally Improve Usability Inwards Long Term Operations

Image
Red Team's SIEM - slow deployable tool for Red Teams used for tracking together with alarming nearly Blue Team activities every bit good every bit improve usability for the Red Team inward long term operations. Initial world free at BruCON 2018: Video: https://www.youtube.com/watch?v=OjtftdPts4g Presentation slides: https://github.com/outflanknl/Presentations/blob/master/MirrorOnTheWall_BruCon2018_UsingBlueTeamTechniquesinRedTeamOps_Bergman-Smeets_FINAL.pdf Goal of the project Short: a Red Team's SIEM. Longer: a Red Team's SIEM that serves 3 goals: Enhanced usability together with overview for the cerise squad operators past times creating a primal place where all relevant operational logs from multiple teamservers are collected together with enriched. This is peachy for historic searching inside the performance every bit good every bit giving a read-only persuasion on the performance (e.g. for the White Team). Especially useful for multi-scenario, multi-tea...

Fibratus - Tool For Exploration Together With Tracing Of The Windows Kernel

Image
Fibratus is a tool which is able to capture the nearly of the Windows kernel action - process/thread creation together with termination, context switches, file arrangement I/O, registry, network activity, DLL loading/unloading together with much more. The nub events tin live easily streamed to a release of output sinks similar AMQP message brokers, Elasticsearch clusters or touchstone output stream. You tin role filaments (lightweight Python modules) to extend Fibratus alongside your ain arsenal of tools together with and therefore leverage the ability of the Python's ecosystem. Installation Download the latest release (Windows installer). The changelog together with older releases tin live flora here . Alternatively, you lot tin become fibratus from PyPI. Install the dependencies Download together with install Python 3.4. Install Visual Studio 2015 (you'll alone need the Visual C compiler to fix the kstreamc extension). Make certain to export the VS10...

W12scan - A Uncomplicated Property Uncovering Engine For Cybersecurity

Image
Chinese W12scan is a network property discovery engine that tin move automatically aggregate related assets for analysis too use. Here is a spider web source program, simply the scanning cease is at w12scan-client Thinking Based on python3 + django + elasticsearch + redis too role the spider web restful api to add together scan targets. Feature Web Powerful search syntax Search for cms, service, titles, province regions, etc., to rapidly regain relevant targets. title=“abc” # Search from the title header=“abc” # Search from http header body=“123” # Search from trunk text url = “*.baidu.com” # Search for subdomains of baidu.com ip = ‘1.1.1.1’ # Search from IP,support '192.168.1.0/24' too '192.168.1.*' port = ‘80’ # Search shape port app = ’nginx’ # Search application country = ‘cn’ # Search from country service = ‘mysql’ # Search from service bug = 'xx' # Search from Vulnerability Custom assert By customizing a company-relate...

Pepe - Collect Data Almost E-Mail Addresses From Pastebin

Image
Collect information near leaked electronic mail addresses from Pastebin About Script parses Pastebin email:password dumps together with get together information near each electronic mail address. It supports Google, Trumail, Pipl, FullContact together with HaveIBeenPwned . Moreover, it allows you lot to shipping an informational postal service to someone near his leaked password, at the terminate every information lands inward Elasticsearch for farther exploration. It supports alone ane format - email:password. Everything else volition non work! For now, notification plant when it finds jibe on FullContact together with side past times side sends you lot electronic mail address together with associated social media accounts. Requirements: Python 3 FullContact API https://www.fullcontact.com/developer/ Google Pipl API https://pipl.com/api/ HaveIBeenPwned SafePush (for notification - optional - In progress) https://www.pushsafer.com/ Trumail https://trumail.io/ Gmai...