https://github.com/kevthehermit/maildb

Python Web App to Parse and Track Email and http Pcap Files.
https://github.com/kevthehermit/maildb

Last synced: about 2 months ago
JSON representation

Python Web App to Parse and Track Email and http Pcap Files.

• Host: GitHub
• URL: https://github.com/kevthehermit/maildb
• Owner: kevthehermit
• License: other
• Created: 2013-01-13T20:27:06.000Z (over 11 years ago)
• Default Branch: master
• Last Pushed: 2013-07-14T19:11:20.000Z (about 11 years ago)
• Last Synced: 2024-07-15T22:50:57.783Z (2 months ago)
• Language: Python
• Size: 604 KB
• Stars: 54
• Watchers: 14
• Forks: 18
• Open Issues: 2
• Metadata Files:
  • Readme: README.md
  • Changelog: ChangeLog
  • License: LICENSE.md

Awesome Lists containing this project

• awesome-network-stuff - **52**星

README

        
Maildb

======

Welcome to the Mail DataBase although it has expanded slightly now. Here is a list of all the things it does at the moment

### Submit email from PCAP, Text stream, IMAP or POP servers

- The email parser will read the headers extracting the main fields

- Links, Img tags and Iframes sources extracted and listed

- Any attatchments are extracted, Hashed stored and scanned with Yara, optionally you can include options to scan with Clam AV and submit to Virus Total

- All the information extracted above is stored in to a SQLite Database as a Task.

- All files are stored for further analysis

- Options to submit file attatchments to Sandboxs, Cuckoo or FireEyes, MAS

###Http PCAP files

- Extract all the streams

- Parse the HTTP Headers

- Extract all the HTTP Objects and files

- Replicate the Server Path structure

- Write the Header data to the SQLite Database as a Task

### Management System

- Micro management system allows you to track Tasks in the Database

- Add Comments to Tasks

- Set tasks as Reviewed, Events or Unchecked

- Generate, Weekly, Montly, Yearly reports on all Submitted tasks

- Trend analysis on all artefacts in the database

Requires:

=========

- Python 2.7

- Mako

- Bottle

- Yara

- BeautifulSoup (Included)

Recommended:

============

- Cuckoo

- SSDEEP

- python requests required for Cuckoo API 

INSTALL:

=========

- See the INSTALL file for installation details

Tested On

=========

- Ubuntu 12.04

- Windows 7 x64

To Do

=====

- Implement Cuckoo API

- Finish the VT Function

- Timer for the IMAP / POP Feeds

- More reports / trends.