utility scripts and such for working with the BinaryEdge platform. These are mostly being written to be used in the shell and piped to each other, ala good old fashioned Unix utilities.
You will need the pybinaryedge python module, along with requests at a minimum. If extra stuff is needed, it will be noted for that script. You will also need a BinaryEdge API key. All of this is only tested on Python2, because I am a fucking dinosaur.
Makes a http.sha256 fingerprint from a webpage, so you can hunt for it later on the BinaryEdge platform. Very useful for hunting embedded devices (routers, etc) or malware http servers that serve a static reply to a GET / request.
To use, just run:
python mkhttpsha256.py http://wtf.lol:8080
It will literally just print out a sha256 hash to stdout. I recommend running it a few times to ensure the content is static - it doesn't work well with dynamic content!
Searches for a given http.sha256, returns IP:Port to stdout for piping to other tools. Suggested for use with mkhttpsha256.py like so to "find more of these fucking boxes":
./mkhttpsha256.py http://interesting.lol:80 | xargs ./findhttpsha256.py
[prints list of new and exciting IP:Port combos]
If given the "-c" flag, will just print the amount of matches instead. Note: Make sure to put in your API key to use this script.
This is an example script that handles page iterating of results. It is HORRIBLE, and a workaround - I wanted more pages, but it wasn't doing it.
It does a query for Busybox devices in Italy, and returns either all the results (until you run out of credits!), or a limited number (using -l PAGENUM).
It is recommended to run this with "-c" first to determine how many pages are needed. If you burn all your credits using this, don't blame me. I fucking warned you.
Example use:
(venv) user@box:~/projects/be-utils$ python example_page_iter.py -c
Results: 778952
Will need to get 38948 pages...
(venv) user@box:~/projects/be-utils$ python example_page_iter.py -l 10 | wc -l
200
(venv) user@box:~/projects/be-utils$
Note: Make sure to put in your API key to use this script.
MIT licence.
use the issue tracker. I'll be ignoring "python3 pls" issues for the current time due to being a fossil who hates putting brackets in print statements.
Ping me on the BE Slack (infodox) or on twitter