index
:
abusectl
master
Abuse reporting for phishing mail: parse, extract IOCs, resolve abuse contacts, report to MISP and public channels
by Danilo aka danix
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
abusectl
Age
Commit message (
Expand
)
Author
Files
Lines
15 hours
fix: prefer the observed address over an attacker's HELO literal
Danilo M.
1
-9
/
+27
15 hours
fix: re-bracket an IPv6 host when stripping URL userinfo
Danilo M.
1
-2
/
+12
15 hours
fix: redact a valueless query token whole, not as a kept name
Danilo M.
2
-5
/
+49
15 hours
fix: validate each setup answer at the prompt that asked for it
Danilo M.
1
-34
/
+101
16 hours
feat: command line for init and parse
Danilo M.
2
-0
/
+234
16 hours
feat: first-run config builder
Danilo M.
1
-0
/
+295
16 hours
fix: reject non-list relays and empty cases values
Danilo M.
1
-2
/
+20
16 hours
feat: read and validate the config
Danilo M.
1
-0
/
+86
17 hours
refactor: one URL scan serving both the report and the flagging
Danilo M.
1
-29
/
+24
17 hours
feat: assemble IOCs in the manifest's shape
Danilo M.
1
-0
/
+105
17 hours
feat: case directory with an atomically written manifest
Danilo M.
1
-0
/
+132
17 hours
feat: extract URLs and attachment hashes, fetching nothing
Danilo M.
1
-0
/
+120
17 hours
feat: extract sender domains and auth verdicts
Danilo M.
1
-1
/
+68
17 hours
feat: walk the Received chain to the trust boundary
Danilo M.
1
-0
/
+114
17 hours
fix: redact fragment and strip userinfo, flag hidden query in path
Danilo M.
1
-11
/
+69
17 hours
feat: redact recipient identifiers inside URLs
Danilo M.
1
-0
/
+105
17 hours
feat: package skeleton
Danilo M.
1
-0
/
+17