-
Notifications
You must be signed in to change notification settings - Fork 0
SuchitReddi/ois
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
_____ __
/#####\ /##\ __
/##__ ##| ____ |__| |##|
| ## \ #| /####| __ ________ __|##|__
| ## | #| /##/__ | #|| ##__###||_ ####_/
| ## | #||######|| #|| #| \##| | ##|
| ## | #| \____#|| #|| #| | #| | ##|__
| #####//#######|| #|| #| | #| | ####/
\_____/ |______/ |__||__/ |__/ \___/
________
|_####_/ _____ ______
| #| /#####\ /######|
| #| |## __##| /##____/
| #| |##| |#|| #|
/####\ | ######|| ######|
|______| \_____/ \______/
_____
/#####\
/##__###| _______ ______ _______ _______ _______ ________
|##| \__/ /######| /######| /#######| /#######| /##__## ||##___ ##|
|##\____ /##_____/ |____|#|| ##__###|| ##__###||##|__|#/ |##| \__/
\____##\| ## /#__##|| ## \##|| ## \##||###___/ |##|
_____\##| ## /#|__|#|| ## |##|| ## |##||##|_____ |##|
|########| ######|| ######|| ## |##|| ## |##||########\|##|
\______/ \_______/\_______||__/ |__||__/ |__/ \_______||__/
OSINT IOC Scanner (OIS) By Suchit
Welcome, Sherlock! The game is on!
Overview:
1) Analysts can give their IOCs (Domain, IP, URL, Hash). The IOC type will be auto-validated by the script. Defanged IOCs are also processed.
2) Maximum of 4 IOCs are recommended to limit excessive resource consumption if you opt for opening results in browser. If more than four are given, a confirmation to proceed will be displayed.
3) The delimiters that can be used between two IOCs are: Space ( ), OR operator ( OR )( or ), and Comma (,).
4) The links for results will be displayed in terminal for analysts to copy paste as references.
5) After the process is done, the script asks again for IOCs until terminated manually.
6) The executable can be run from anywhere, but the config file created needs to be in the same directory.
7) If you submit Virus Total API Key, you can get many details directly in console. IOCs will be submitted to VT for reanalyzing when the script is run.
8) If you have URLScan account, you can use the API to get a live screenshot for the URL. You will be prompted to choose if you want to use it or not in the beginning. If you want to change the choice later, you can edit it from e.
Known Issues:
--> IOCs can't be seperated by new line character as powershell works differently in those cases.
--> When user selects clear screen, it doesn't clear the whole history which can be seen by scrolling up. But it does clear up the window.