https://github.com/0xd34db33f/gfyp

Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.
https://github.com/0xd34db33f/gfyp

Last synced: 3 months ago
JSON representation

Unification of dnstwist + SQLite + Email reporting. Set it as a cron job that runs every hour, give it a list of domains and email addresses for reporting, then watch it go find stuff.

• Host: GitHub
• URL: https://github.com/0xd34db33f/gfyp
• Owner: 0xd34db33f
• Created: 2015-09-22T02:00:24.000Z (about 9 years ago)
• Default Branch: master
• Last Pushed: 2018-03-06T23:28:34.000Z (over 6 years ago)
• Last Synced: 2024-04-06T10:34:37.150Z (7 months ago)
• Language: Python
• Homepage:
• Size: 41 KB
• Stars: 67
• Watchers: 5
• Forks: 15
• Open Issues: 6
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-security-collection - **52**星

README

        
# GFYP - Go Find Your Phishers

This tool augments [dnstwist](https://github.com/elceef/dnstwist) with a database that tracks identified phishing sites over times, and provides email alerts when new ones are discovered.

## Installation

    $ pip install -r requirements.txt

## Configuration

1. Initialize database with `python util.py build`

2. Either add your SMTP credentials by hard-coding them in core.py, or set the

following environment variables:

    * `GFYP_EMAIL_USERNAME`

    * `GFYP_EMAIL_PASSWORD`

    * `GFYP_EMAIL_SMTPSERVER`

Ex.

    $ export [email protected]

    $ export GFYP_EMAIL_PASSWORD=ilovemallory

    $ export GFYP_EMAIL_SMTPSERVER=smtp.example.com

## Usage

    # add domain to list for which to hunt phishing domains

    python util.py add (domain name) (email address) [optional: path to csv containing additional TLDs to check]

    # start searching process

    python core.py # or set it as a cron job to regular reports

## Troubleshooting

### GMail

If using GMail as an SMTP provider, you may first need to log into GMail in the web interface and enable the "Allow less secure apps" option in the "Sign-in & security" section.