https://github.com/kevthehermit/PasteHunter

Scanning pastebin with yara rules
https://github.com/kevthehermit/PasteHunter

Last synced: 3 months ago
JSON representation

Scanning pastebin with yara rules

• Host: GitHub
• URL: https://github.com/kevthehermit/PasteHunter
• Owner: kevthehermit
• License: gpl-3.0
• Created: 2017-09-02T19:21:56.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2021-09-08T16:26:19.000Z (almost 3 years ago)
• Last Synced: 2024-01-23T04:07:52.961Z (5 months ago)
• Language: Python
• Homepage:
• Size: 285 KB
• Stars: 1,024
• Watchers: 67
• Forks: 240
• Open Issues: 15
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Lists

• awesome-yara - PasteHunter
• awesome-yara-Resource - PasteHunter
• awesome-stars - PasteHunter
• awesome-hacking-lists - PasteHunter - Scanning pastebin with yara rules (Python (1887))
• awesome-hacking-lists - kevthehermit/PasteHunter - Scanning pastebin with yara rules (Python)
• awesome - PasteHunter - Scanning pastebin with yara rules (Python)
• awesome-hacking-lists - PasteHunter - Scanning pastebin with yara rules (Python)

README

        
# PasteHunter

PasteHunter is a python3 application that is designed to query a collection of sites that host publicly pasted data. 

For all the pastes it finds it scans the raw contents against a series of Yara rules looking for information that can be used 

by an organisation or a researcher.

## Setup 

For setup instructions please see the official documentation https://pastehunter.readthedocs.io/en/latest/installation.html

[![PyPI version](https://badge.fury.io/py/pastehunter.svg)](https://badge.fury.io/py/pastehunter)

[![Build Status](https://travis-ci.org/kevthehermit/PasteHunter.svg?branch=master)](https://travis-ci.org/kevthehermit/PasteHunter)

## Supported Inputs

Pastehunter currently has support for the following sites:

 - pastebin.com

 - gist.github.com # Gists

 - github.com # Public commit activity feed

 - slexy.org

 - stackexchange # There are about 176! 

## Supported Outputs

Pastehunter supports several output modules:

 - dump to ElasticSearch DB (default).

 - Email alerts (SMTP).

 - Slack Channel notifications.

 - Dump to JSON file.

 - Dump to CSV file.

 - Send to syslog.

 - POST to URL

 ## Supported Sandboxes

 Pastehunter supports several sandboxes that decoded data can be sent to:

 - Cuckoo

 - Viper

For examples of data discovered using pastehunter check out my posts https://techanarchy.net/blog/hunting-pastebin-with-pastehunter and https://techanarchy.net/blog/pastehunter-the-results