在线时间:8:00-16:00
迪恩网络APP
随时随地掌握行业动态
扫描二维码
关注迪恩网络微信公众号
开源软件名称:deepdivesec/GitMAD开源软件地址:https://github.com/deepdivesec/GitMAD开源编程语言:Python 81.5%开源软件介绍:GitMAD (Git Monitor, Alert, Discover)GitMAD is a full stack application that monitors Github for a given keyword(s) or domain. GitMAD searches code hosted on Github for a matching keyword. On finding a match, GitMAD will clone the repository and search through the files for a series of configurable regular expressions. GitMAD then takes those results and inserts them into a database for later viewing. These results can also be sent as email alerts. GitMAD runs continuously to discover new repositories matching the input keyword. InputGitMAD searches Github for a keyword or domain. The user can also configure the maximum amount of results per search, the amount of time between searches, and the maximum size of a repository to clone. There are two modes, Monitor and Discovery. Discovery mode pulls out and searches new results with each run. Monitor mode will download all matches of a given keyword / domain first, search them, and then continue to search for new results. ProcessingGitMAD takes the results from above and searches the Git history of the repository. The history is searched for a set of configurable regular expressions. GitMAD can also break up each line of a history file and search this for matches in Shannon entropy. There are two configurable files:regex_matches.pyThis is the location to put keywords and regular expressions to search within the content of a repository, just add a dictionary to the list below: to_match = [
{'match_regex': r'password', 'match_type': 'Password Match'},
{'match_regex': r'\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}', 'match_type': 'IP Match'},
{'match_regex': r'username', 'match_type': 'Username Match'},
{'match_regex': r'\b[\w.]*@[\w]*\.[\w.]*\b', 'match_type': 'Email Match'}
] entropy_whitelist.pyThis is the location to remove items the Entropy feature is matching that you do not want. Just add a dictionary to the list below: r_whitelist = [{'regex':r'\b[A-Za-z][a-z]+([A-Z][a-z]*)+\b'}] # Camel Case OutputGitMAD takes the results above and inserts them into a database which contains information on the file the match was found, as well as information about the repository. It also inserts the string that was matched and the line of the match. These results are available via an email alert, in the database, and via the web application. Web ApplicationRunning web_home.py will open a web application on port 5000. There is a 'Monitor' section which allows a user to view and filter on individual matches within a repository. The 'Repo Info' section allows a user to view and filter on the repository matches themselves. API/api/reposAllows a user to view either the first 100 most recent repositories, or to use various filters to search for a given repo or set of repos. A GET request with no parameters to /api/repos will return the 100 most recent results. GET http://localhost:5000/api/repos
Content-Type: application/json A POST request allows a user to filter for a specific repo or repos. Send a JSON object (Content-Type: application/json) with at least one of the following keys:
POST data example (at least one of these keys must be used): POST http://localhost:5000/api/repos
Content-Type: application/json
{
"page": 1,
"repo_user": "<Username of the repository>",
"repo_name": "<Name of the repository>",
"repo_cloned": "<cloned|not_cloned>",
"repo_desc": "<text string to search for in the repository description>"
} /api/resultsAllows a user to view either the first 100 most recent results, or to use various filters to search for a given match or set of matches. A GET request with no parameters to /api/repos will return the 100 most recent results. GET http://localhost:5000/api/results
Content-Type: application/json A POST request allows a user to filter for a specific match or type of match. Send a JSON object (Content-Type: application/json) with at least one of the following keys:
POST data example (at least one of these keys must be used): POST http://localhost:5000/api/repos
Content-Type: application/json
{
"page": 2,
"match_type": "<type of match>",
"match_string": "<item that was matched>",
"match_location": "<file location where item was matched>",
"match_line": "<match something on the line of the initial match>",
"match_update_type": "<['+','-'] addition or deletion to/from repo>",
"match_author": "<commit author>",
"match_message": "<commit message>"
} Current StatusThis project is in active development InstallGitMAD was originally written in Python3.6 on Windows. It has also been tested on Ubuntu 18.04. Software RequirementsPython 3.6+ (f-strings are used in this project, which requires Python 3.6) Pip for Python3 Git MySQL 8.0 For MySQL 8.0 on Windows, you should be able to download from the Oracle Website. For Ubuntu 18.04, the default version is still 5.7, so you will have to change the version:
Step By Step (commands performed on Ubuntu 18.04)1) Clone the repository and enter directory:
2) Install dependencies:
3) Add script to MySQL:
4) Run main.py and on first run enter configuration information:
5) Run web application:
6) (Optional) Download and install MySQL Workbench to directly interact with results:https://dev.mysql.com/downloads/workbench/ Additional Ubuntu install gifs available here:https://github.com/deepdivesec/GitMAD/tree/master/GitMAD-install Known Issues
|
2023-10-27
2022-08-15
2022-08-17
2022-09-23
2022-08-13
请发表评论