Miteru - an experimental phishing kit detection tool

[ESCO]

Miteru is an experimental phishing kit detection tool.

How it works

• It collects phishy URLs from the following feeds:
  • CertStream-Suspicious feed via urlscan.io
  • OpenPhish feed via urlscan.io
  • PhishTank feed via urlscan.io
  • Ayashige feed
• It checks each phishy URL whether it enables directory listing and contains a phishing kit (compressed file) or not.
  • Note: compressed file = *.zip, *.rar, *.7z, *.tar and *.gz.

Features

• Phishing kit detection & collection.
• Slack notification.
• Threading.

Installation

Code:
gem install miteru

Note
For using --post-to-slack feature, you should set the following environment variables:

• SLACK_WEBHOOK_URL: Your Slack Webhook URL.
• SLACK_CHANNEL: Slack channel to post a message (default: "#general").

Download Miteru