woj-ciech/danger-zone

Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.

Main Projects:

• Kamerka

ICS Cyber Seurity Conference - Intelligence gathering on US critical infrastructure

Motherboard Vice - Kamerka

Security week - Researcher shows how adversaries can gather intel US critical infrastructure

Offensive OSINT - Build interactive map of cameras from shodan

Offensive OSINT - hunting with Kamerka 2.0

Offensive OSINT - State of industrial control systems in Poland and Switzerland

Offensive OSINT - Journey over unsecured devices with Kamerka

• Kamerka GUI - Ultimate ISC & IoT reconaissance tool

NSA & CISA advisory

ZDNET - Kamerka show your country's internet connected critical infrastructure

Security Week - GUI now available for Kamerka

Offensive OSINT - Hack the planet with Kamerka GUI. Ultimate IOT/ICS reconnaissance tool

Offensive OSINT - When Kamerka meet healthcare sector

Offensive OSINT - Hack like it's 2077 - Kamerka mobile

Offensive OSINT - Intelligence gathering on Internet facing critical infrastructure in United States of America and Russian Federation

Offensive OSINT - Intelligence gathering on critical infrastructure in Southeast Asia

• LeakLooker

Offensive OSINT - Find open databases in a second

Offensive OSINT - Source code leaks

Offensive OSINT - Leaklooker v3 - Internal files, DNA samples

Offensive OSINT - Amazon S3 leaks and bucket takeover

• Leaklooker X GUI - Find and monitor data leaks

Offensive OSINT - Leaklooker GUI

Offensive OSINT - Offensive leak hunting

• SocialPath - Social media intelligence gathering tool

Offensive OSINT - Tracking darknet users across social media platforms

• Danger Zone - Visualize relationships between doamin, ip address and email

Offensive OSINT - Visualize relationships between domains, ip addresses and emails

• Bad Ads - Bedpage monitoring

Offensive OSINT - Human trafficking investigation. Monitoring Bedpage

danger-zone's Issues

error when generate graphics

this error is when it is finishing..

SO:
Kali GNU/Linux Rolling \n \l
Linux kali 4.17.0-kali1-amd64 #1 SMP Debian 4.17.8-1kali1 (2018-07-24) x86_64 GNU/Linux

ERROR:

Traceback (most recent call last):
File "danger-zone.py", line 230, in
tools.save_graph(G, domain)
File "/root/Danger-zone/tools.py", line 74, in save_graph
nx.draw(G, with_labels=True) # ,edge_colors=colors)
File "/usr/local/lib/python2.7/dist-packages/networkx/drawing/nx_pylab.py", line 112, in draw
cf = plt.gcf()
File "/usr/local/lib/python2.7/dist-packages/matplotlib/pyplot.py", line 586, in gcf
return figure()
File "/usr/local/lib/python2.7/dist-packages/matplotlib/pyplot.py", line 535, in figure
**kwargs)
File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/backend_tkagg.py", line 81, in new_figure_manager
return new_figure_manager_given_figure(num, figure)
File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/backend_tkagg.py", line 89, in new_figure_manager_given_figure
window = Tk.Tk()
File "/usr/lib/python2.7/lib-tk/Tkinter.py", line 1822, in init
self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use)
_tkinter.TclError: no display name and no $DISPLAY environment variable

problem

hej mam problem z uruchomieniem

mozesz pomoc?

ImportError: cannot import name emails

Hello,
Tried running the code and got the error noted in the subject line. Here's the full output:

Traceback (most recent call last): File "./danger-zone.py", line 5, in <module> import utils File "/mnt/c/Users/Ken/Documents/GitHub/Danger-zone/utils.py", line 2, in <module> import emails File "/mnt/c/Users/Ken/Documents/GitHub/Danger-zone/emails.py", line 5, in <module> from google import google ImportError: cannot import name google

Changing "import emails" to "import email" in utils.py stops this error but then new errors come up later in the process. My Python skills aren't good enough to figure it out from there.

HaveIbeenPwnded module issues

I kept getting "Connection Error" for the haveibeenpwned module. I found the was in the handling of the response.

Starting @ line 108 - should be checking req_haveibeenpwned.status_code.

also per the api docs, status_code of 404 means the account wasn't found in their database.

Here's how I fixed it:
if req_haveibeenpwned.status_code != 200: if req_haveibeenpwned.status_code == 404: print "account not pwned" return False print "Connection error " + str(req_haveibeenpwned.status_code) +" " + req_haveibeenpwned.text return False

Zoom in graph is cutting the beginning and end of IPs/hostnames

Example 1

Example 2

Add demo gif to README

Disclaimer: This is a bot

It looks like your repo is trending. The github_trending_videos Instgram account automatically shows the demo gifs of trending repos in Github.

Your README doesn't seem to have any demo gifs. Add one and the next time the parser runs it will pick it up and post it on its Instagram feed. If you don't want to just close this issue we won't bother you again.

Suggestion for user accounts

Just trying out your tool and have a suggestion. I maintain the https://github.com/webbreacher/whatsmyname project that has a JSON file for figuring out if a user name account exists on over 140 different sites. It may be useful to pull that and use it in your tool.

HTTP calls to several apis that have TLS

I would prefer TLS when available

NameError: global name 'google' is not defined

input as follows:
python danger-zone.py --email [email protected]

Error:
Traceback (most recent call last): File "danger-zone.py", line 41, in <module> domains_from_email = util.get_domain_from_email(email, elastic_output) File "/Danger-zone-master/utils.py", line 46, in get_domain_from_email email1.google() File "/Danger-zone-master/emails.py", line 146, in google search_results = google.search("\"" + self.email_address + "\"", 1) NameError: global name 'google' is not defined

Had earlier error
ImportError: cannot import name google
so changed import in emails.py to:
from google import *

HaveIBeenPwned Wrong API Version

HaveIBeenPwned comes back with wrong API version.

email format

so trying to run this on powershell on windows, and passing the email as '@mail.com' and get wrong email format, if i use it without quotes The splatting operator '@' cannot be used to reference variables in an expression.

what is the correct way to format email?

Installed on mac, shows only the info, no requests.

Do i have to make open port to firewall or what?

Domaintools support

Hi,
because i already have an domaintools account, i would like to know if there is a way to implement this.

Elastic Cloud Settings

The settings.json file has a setting for a local instance of Elastic search. Would it be possible to give us the parameters for Elastic Cloud? I have installed Danger-zone on Kali, and it works great, but would really like to use Elastic Cloud.

VirusTotal module hangs, errors

Loving this tool. However, running a --domain search it got to where it hit the VirusTotal API limit and went to sleep for 70 seconds. It hung there indefinitely. I hit the space bar and got the following error:

----------------VirusTotal module--------------------------- API limitation, putting into sleep for 70 sec [*] Domain was resolved to following IPs: 207.210.240.140 on 2015-09-04 00:00:00 -------------------WhoIs history module--------------------- [*} Found 0 result(s) Traceback (most recent call last): File "./Danger-zone.py", line 230, in <module> tools.save_graph(G, domain) File "/mnt/c/users/ken/Documents/GitHub/Danger-zone/tools.py", line 74, in save_graph nx.draw(G, with_labels=True) # ,edge_colors=colors) File "/usr/local/lib/python2.7/dist-packages/networkx/drawing/nx_pylab.py", line 112, in draw cf = plt.gcf() File "/usr/local/lib/python2.7/dist-packages/matplotlib/pyplot.py", line 586, in gcf return figure() File "/usr/local/lib/python2.7/dist-packages/matplotlib/pyplot.py", line 535, in figure **kwargs) File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/backend_tkagg.py", line 81, in new_figure_manager return new_figure_manager_given_figure(num, figure) File "/usr/local/lib/python2.7/dist-packages/matplotlib/backends/backend_tkagg.py", line 89, in new_figure_manager_given_figure window = Tk.Tk() File "/usr/lib/python2.7/lib-tk/Tkinter.py", line 1818, in __init__ self.tk = _tkinter.create(screenName, baseName, className, interactive, wantobjects, useTk, sync, use) _tkinter.TclError: no display name and no $DISPLAY environment variable

print() is a function in Python 3

flake8 testing of https://github.com/woj-ciech/Danger-zone on Python 3.7.0

$ flake8 . --count --select=E901,E999,F821,F822,F823 --show-source --statistics

./tools.py:17:48: E999 SyntaxError: invalid syntax
        print "Unable to parse config file: {0}".format(e)
                                               ^
./domains.py:19:34: E999 SyntaxError: invalid syntax
            print "Unknown domain"
                                 ^
./utils.py:76:33: E999 SyntaxError: invalid syntax
            print "Nothing found"
                                ^
./danger-zone.py:44:30: E999 SyntaxError: invalid syntax
        print "Found domain: "
                             ^
./emails.py:18:21: E999 SyntaxError: invalid syntax
        print bcolors.UNDERLINE + "------------------Trumail module----------------" + bcolors.ENDC
                    ^
./elastictest.py:1228:10: E999 SyntaxError: invalid syntax
print json
         ^
./graph.py:47:11: E999 SyntaxError: invalid syntax
    print g.edges
          ^
./ip.py:18:68: E999 SyntaxError: invalid syntax
        print "-------------Geolocation module---------------------"
                                                                   ^
8     E999 SyntaxError: invalid syntax
8