sf

SpiderFoot is an opened upwards source intelligence (OSINT) automation tool. Its finish is to automate the procedure of gathering word close a given target, which may endure an IP address, domain name, hostname, network subnet, ASN or person's name. SpiderFoot tin dismiss endure used offensively, i.e. every bit purpose of a black-box penetration test to assemble information close the target or defensively to position what information your organisation is freely providing for attackers to utilization against you. What is SpiderFoot? SpiderFoot is a reconnaissance tool that automatically queries over 100 populace information sources (OSINT) to assemble word on IP addresses, domain names, electronic mail addresses, names in addition to more. You merely specify the target yous desire to investigate, selection which modules to enable in addition to and thus SpiderFoot volition collect information to construct upwards an agreement of all the entities in addition to how...

Advanced Indicator of Compromise (IOC) extractor. Overview This library extracts URLs, IP addresses, MD5/SHA hashes, electronic mail addresses, in addition to YARA rules from text corpora. It includes around encoded in addition to "defanged" IOCs inwards the output, in addition to optionally decodes/refangs them. The Problem It is mutual do for malware analysts or endpoint software to "defang" IOCs such equally URLs in addition to IP addresses, inwards guild to forestall accidental exposure to alive malicious content. Being able to extract in addition to aggregate these IOCs is oft valuable for analysts. Unfortunately, existing "IOC extraction" tools oft overstep correct yesteryear them, equally they are non caught yesteryear criterion regex. For example, the unproblematic defanging technique of surrounding periods alongside brackets: 127[.]0[.]0[.]1 Existing tools that utilization a unproblematic IP address regex volition ignore ...