index
:
abusectl
master
Abuse reporting for phishing mail: parse, extract IOCs, resolve abuse contacts, report to MISP and public channels
by Danilo aka danix
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Age
Commit message (
Expand
)
Author
Files
Lines
8 hours
docs: record the real-mail sweep and open a backlog
HEAD
master
Danilo M.
2
-0
/
+78
8 hours
feat: report List-Unsubscribe urls and a differing Sender
Danilo M.
4
-2
/
+53
8 hours
feat: flag an address spoofed into a display name
Danilo M.
2
-1
/
+64
8 hours
fix: take the sender domain from the address, not the display name
Danilo M.
3
-4
/
+38
9 hours
fix: prefer the observed address over an attacker's HELO literal
Danilo M.
2
-9
/
+49
9 hours
fix: re-bracket an IPv6 host when stripping URL userinfo
Danilo M.
2
-2
/
+24
9 hours
fix: redact a valueless query token whole, not as a kept name
Danilo M.
3
-5
/
+63
9 hours
test: wire leaky.eml into the anti-leak suite (red, defect 2)
Danilo M.
2
-1
/
+29
9 hours
docs: AGENTS.md, with CLAUDE.md pointing at it
Danilo M.
2
-0
/
+259
9 hours
docs: README covers init and parse
Danilo M.
1
-10
/
+83
10 hours
fix: validate each setup answer at the prompt that asked for it
Danilo M.
1
-34
/
+101
11 hours
feat: command line for init and parse
Danilo M.
3
-0
/
+401
11 hours
feat: first-run config builder
Danilo M.
2
-0
/
+480
11 hours
fix: reject non-list relays and empty cases values
Danilo M.
2
-2
/
+49
11 hours
feat: read and validate the config
Danilo M.
2
-0
/
+174
11 hours
refactor: one URL scan serving both the report and the flagging
Danilo M.
1
-29
/
+24
11 hours
feat: assemble IOCs in the manifest's shape
Danilo M.
2
-0
/
+168
11 hours
feat: case directory with an atomically written manifest
Danilo M.
2
-0
/
+234
11 hours
feat: extract URLs and attachment hashes, fetching nothing
Danilo M.
2
-0
/
+181
11 hours
feat: extract sender domains and auth verdicts
Danilo M.
2
-1
/
+100
11 hours
feat: walk the Received chain to the trust boundary
Danilo M.
2
-0
/
+182
11 hours
fix: redact fragment and strip userinfo, flag hidden query in path
Danilo M.
2
-11
/
+111
11 hours
feat: redact recipient identifiers inside URLs
Danilo M.
2
-0
/
+211
11 hours
test: fixtures for the parser, documentation ranges only
Danilo M.
4
-0
/
+81
11 hours
feat: package skeleton
Danilo M.
3
-0
/
+45
11 hours
plan: add Namecheap Private Email to the provider table
Danilo M.
1
-0
/
+26
11 hours
plan: take the provider ranges from SPF, not from memory
Danilo M.
1
-16
/
+88
11 hours
plan: implementation plan for init and parse
Danilo M.
2
-2
/
+2404
12 hours
spec: retry deferred destinations from cron, not by hand
Danilo M.
1
-12
/
+123
12 hours
Initial commit: umbrella design for abusectl
Danilo M.
4
-0
/
+839