Posts

Showing posts with the label VirusTotal

Dirhunt V0.6.0 - Uncovering Spider Web Directories Without Bruteforce

Image
DEVELOPMENT BRANCH : The electrical current branch is a evolution version. Go to the stable issue past times clicking on the principal branch . Dirhunt is a spider web crawler optimize for search together with analyze directories . This tool tin forcefulness out let on interesting things if the server has the "index of" manner enabled. Dirhunt is also useful if the directory listing is non enabled. It detects directories alongside false 404 errors , directories where an empty index file has been created to enshroud things together with much more. $ dirhunt http://website.com/ Dirhunt does non operate beast force. But neither is it only a crawler . This tool is faster than others because it minimizes requests to the server. Generally, this tool takes between 5-30 seconds , depending on the website together with the server. Read to a greater extent than close how to use Dirhunt in the documentation . Features Process one or multiple sites at a time. P...

Malice - Virustotal Wanna Move (Now Alongside 100% To A Greater Extent Than Hipster)

Image
Malice's mission is to live a costless opened upwards source version of VirusTotal that anyone tin give notice role at whatever scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker Getting Started (OSX) Install $ brew install maliceio/tap/malice Usage: malice [OPTIONS] COMMAND [arg...] Open Source Malware Analysis Framework Version: 0.3.11 Author: blacktop - <https://github.com/blacktop> Options: --debug, -D Enable debug trend [$MALICE_DEBUG] --help, -h demo assistance --version, -v impress the version Commands: scan Scan a file lookout Watch a folder lookup Look upwards a file hash elk Start an ELK docker container plugin List, Install or Remove Plugins assistance Shows a listing of commands or assistance for i ascendancy Run ...

Osint-Spy - Search Using Osint (Open Rootage Intelligence)

Image
Performs OSINT scan on email/domain/ip_address/organization using OSINT-SPY. It tin hold upward used past times Data Miners, Infosec Researchers, Penetration Testers too cyber criminal offence investigator inwards social club to uncovering deep information close their target. OSINT-SPY Documentation (beta) File Name : README Author : @sk_security Version : 0.0.1 Website : osint-spy.com Overview of this tool: Perform scan on IP Address / domain / e-mail address / BTC(bitcoin) address / device Find out latest bitcoin block information List out all the ciphers supported past times especial website too server Check whether a especial website is vulnerable to heartbleed or non ? Dump all the contacts too messages from skype database Analyze malware or malicous file remotely Licenses information OSINT-SPY too its documents are covered alongside GPL-3.0 (General Public License v3.0) Using OSINT-SPY @@@@@@@@@ @@@@@@@@@ | ...

Hostintel - A Modular Python Application To Collect Tidings For Malicious Hosts

Image
This tool is used to collect diverse intelligence sources for hosts. Hostintel is written inwards a modular fashion together with thus novel tidings sources tin survive easily added. Hosts are identified past times FQDN host name, Domain, or IP address. This tool exclusively supports IPv4 at the moment. The output is inwards CSV format together with sent to STDOUT together with thus the information tin survive saved or piped into to a greater extent than or less other program. Since the output is inwards CSV format, spreadsheets such equally Excel or database systems volition easily survive able to import the data. I created a brusque introduction for this tool on YouTube: https://youtu.be/aYK0gILDA6w This industrial plant alongside Python v2, only it should also locomote alongside Python v3. If you lot detect it does non locomote alongside Python v3 delight post service an issue. Help Screen: $ python hostintel.py -h usage: hostintel.py [-h] [-a] [-d] [-v] [-p] [-s] [-c] [-t...

Beagle - An Incident Reply In Addition To Digital Forensics Tool Which Transforms Safety Logs In Addition To Information Into Graphs

Image
Beagle is an incident response in addition to digital forensics tool which transforms information sources in addition to logs into graphs. Supported information sources include FireEye HX Triages, Windows EVTX files, SysMon logs in addition to Raw Windows retention images. The resulting Graphs tin john endure sent to graph databases such equally Neo4J or DGraph, or they tin john endure kept locally equally Python NetworkX objects. Beagle tin john endure used straight equally a python library, or through a provided spider web interface. The library tin john endure used either equally a sequence of functional calls. >>> from beagle.datasources import SysmonEVTX >>> graph = SysmonEVTX("malicious.evtx").to_graph() >>> graph <networkx.classes.multidigraph.MultiDiGraph at 0x12700ee10> Or past times strictly calling each intermediate pace of the information source to graph process. >>> from beagle.backends import NetworkX...

Extanalysis - Browser Extension Analysis Framework

Image
With ExtAnalysis yous tin : Download & Analyze Extensions From: Chrome Web Store Firefox Addons Analyze Installed Extensions of: Google Chrome Mozilla Firefox Opera Browser (Coming Soon) Upload in addition to Scan Extensions. Supported formats: .crx .xpi .zip Features of ExtAnalysis : View Basic Informations: Name, Author, Description in addition to Version Manifest Viewer In depth permission information Extract Intels from files which include: URLs in addition to domains IPv6 in addition to IPv4 addresses Bitcoin addresses Email addresses File comments Base64 encoded strings View in addition to Edit files. Supported file types: html json JavaScript css VirusTotal Scans For: URLs Domains Files RetireJS Vulnerability scan for JavaScript files Network graph of all files in addition to URLs Reconnaissance tools for extracted URLs: Whois Scan HTTP headers viewer URL Source viewer GEO-IP location Some Fun Stuffs th...

Vthunting - A Tiny Script Used To Generate Study Virtually Virustotal Hunting In Addition To Ship It Past Times Email, Slack Or Telegram

Image
Virus Total Hunting is a tiny tool based on the VT api version iii to run daily, weekly or monthly written report close malware hunting. The written report tin survive shipping via email, Slack channel or Telegram. The tool tin also survive used inwards cli to teach a written report anytime. The default pose out of consequence is 10 but it tin survive increase or decrease inwards the config part. This tool is exclusively working amongst a Virus Total Intelligence API. Report Example The below extract is an representative of generated report. __ _______ _ _ _ _ \ \ / /_ _| | | | |_ _ _ __ | |_(_)_ __ __ _ \ \ / / | | | |_| | | | | '_ \| __| | '_ \ / _` | \ V / | | | _ | |_| | | | | |_| | | | | (_| | \_/ |_| |_| |_|\__,_|_| |_|\__|_|_| |_|\__, | |___/ McAfee ATR | Thomas Roccia | @fr0gger_ Get latest hunt...