README.md

Target scouter

The tool is designed for targeted exploration of similar brand resources

Algorithm:

Search by:

• favicons hashes (mmh3, sha256);
• ips (relations hosts on IP);
• <title> keywords;

Retrieves data from resources:

Resource	API limits
Shodan	*
URLscan	*
PhishStats	*
ViewDNS	Free API 250 requests per month
VirusTotal	Free API 500 lookups / day
Netlas	daily limits

Add API keys for working with resources in the file src/config.py

1. Set up rules for companies

To get favicons hashes, you can put them in src/settings/favicons and run src/settings/hasher.py.

Fill in the rules in src/settings/settings.yaml:

favicons:
  sha256hash: ["<STR: sha256 hash favicon>", ...]
  murmurhash: [<mmh3 hash favicon>, ...]
  enable: True

keywords:
  title: ["<title keyword>", ...]
  enable: True

ips:
  ips: ["<ip>", ...]
  enable: False

2. Run src/main.py

The results are written in JSON format to the file data/results.json. Search for indicators for the last month.

Good luck friend!