Miteru v0.11.3 releases: An experimental phishing kit detection tool

Miteru

Miteru is an experimental phishing kit detection tool.

How it works

Features

  •  Phishing kit detection & collection.
  •  Slack integration. (Posting a message to Slack if the tool detects a phishing kit.)
  •  Threading.

Installation

$ gem install miteru

Using Docker (alternative if you don’t install Ruby)

$ git clone https://github.com/ninoseki/miteru.git
$ cd miteru/docker
$ docker build -t miteru .
$ docker run miteru
# ex. auto-download detected phishing kit(s) into host machines's /tmp directory
$ docker run -v /tmp:/tmp miteru execute --auto-download

Usage

$ miteru
Commands:
  miteru execute         # Execute the crawler
  miteru help [COMMAND]  # Describe available commands or one specific command

 

 

 

 

$ miteru help execute
Usage:
  miteru execute

Options:
  [--auto-download], [--no-auto-download]              # Enable or disable auto-download of compressed file(s)
  [--directory-traveling], [--no-directory-traveling]  # Enable or disable directory traveling
  [--download-to=DOWNLOAD_TO]                          # Directory to download file(s)
                                                       # Default: /tmp
  [--post-to-slack], [--no-post-to-slack]              # Post a message to Slack if it detects a phishing kit
  [--size=N]                                           # Number of urlscan.io's results. (Max: 10,000)
                                                       # Default: 100
  [--threads=N]                                        # Number of threads to use
                                                       # Default: 10
  [--verbose], [--no-verbose]
                                                       # Default: true

Execute the crawler

 

 

 

 

Note: Stoped the process during the execution because it takes minutes to finish.

Note

For using –post-to-slack feature, you should set the following environment variables:

  • SLACK_WEBHOOK_URL: Your Slack Webhook URL.
  • SLACK_CHANNEL: Slack channel to post a message (default: “#general”).

Demo

asciicast

Copyright (c) 2018 Manabu Niseki

Source: https://github.com/ninoseki/

Share