index
:
abusectl
master
Abuse reporting for phishing mail: parse, extract IOCs, resolve abuse contacts, report to MISP and public channels
by Danilo aka danix
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
Age
Commit message (
Expand
)
Author
Files
Lines
33 hours
docs: plan the contacts implementation
Danilo M.
2
-4
/
+1989
34 hours
docs: spec the contacts subcommand
Danilo M.
2
-0
/
+349
2 days
docs: record the real-mail sweep and open a backlog
Danilo M.
2
-0
/
+78
2 days
feat: report List-Unsubscribe urls and a differing Sender
Danilo M.
4
-2
/
+53
2 days
feat: flag an address spoofed into a display name
Danilo M.
2
-1
/
+64
2 days
fix: take the sender domain from the address, not the display name
Danilo M.
3
-4
/
+38
2 days
fix: prefer the observed address over an attacker's HELO literal
Danilo M.
2
-9
/
+49
2 days
fix: re-bracket an IPv6 host when stripping URL userinfo
Danilo M.
2
-2
/
+24
2 days
fix: redact a valueless query token whole, not as a kept name
Danilo M.
3
-5
/
+63
2 days
test: wire leaky.eml into the anti-leak suite (red, defect 2)
Danilo M.
2
-1
/
+29
2 days
docs: AGENTS.md, with CLAUDE.md pointing at it
Danilo M.
2
-0
/
+259
2 days
docs: README covers init and parse
Danilo M.
1
-10
/
+83
2 days
fix: validate each setup answer at the prompt that asked for it
Danilo M.
1
-34
/
+101
2 days
feat: command line for init and parse
Danilo M.
3
-0
/
+401
2 days
feat: first-run config builder
Danilo M.
2
-0
/
+480
2 days
fix: reject non-list relays and empty cases values
Danilo M.
2
-2
/
+49
2 days
feat: read and validate the config
Danilo M.
2
-0
/
+174
2 days
refactor: one URL scan serving both the report and the flagging
Danilo M.
1
-29
/
+24
2 days
feat: assemble IOCs in the manifest's shape
Danilo M.
2
-0
/
+168
2 days
feat: case directory with an atomically written manifest
Danilo M.
2
-0
/
+234
2 days
feat: extract URLs and attachment hashes, fetching nothing
Danilo M.
2
-0
/
+181
2 days
feat: extract sender domains and auth verdicts
Danilo M.
2
-1
/
+100
2 days
feat: walk the Received chain to the trust boundary
Danilo M.
2
-0
/
+182
2 days
fix: redact fragment and strip userinfo, flag hidden query in path
Danilo M.
2
-11
/
+111
2 days
feat: redact recipient identifiers inside URLs
Danilo M.
2
-0
/
+211
2 days
test: fixtures for the parser, documentation ranges only
Danilo M.
4
-0
/
+81
2 days
feat: package skeleton
Danilo M.
3
-0
/
+45
2 days
plan: add Namecheap Private Email to the provider table
Danilo M.
1
-0
/
+26
2 days
plan: take the provider ranges from SPF, not from memory
Danilo M.
1
-16
/
+88
2 days
plan: implementation plan for init and parse
Danilo M.
2
-2
/
+2404
2 days
spec: retry deferred destinations from cron, not by hand
Danilo M.
1
-12
/
+123
2 days
Initial commit: umbrella design for abusectl
Danilo M.
4
-0
/
+839