Watcher
| Project Name | Stars | Downloads | Repos Using This | Packages Using This | Most Recent Commit | Total Releases | Latest Release | Open Issues | License | Language |
|---|---|---|---|---|---|---|---|---|---|---|
| Watcher | 692 | 8 days ago | 12 | agpl-3.0 | Python | |||||
| Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS. | ||||||||||
| Antenna | 640 | 18 hours ago | 2 | apache-2.0 | JavaScript | |||||
| Antenna是58同城安全团队打造的一款辅助安全从业人员验证网络中多种漏洞是否存在以及可利用性的工具。其基于带外应用安全测试(OAST)通过任务的形式，将不同漏洞场景检测能力通过插件的形式进行集合，通过与目标进行out-bind的数据通信方式进行辅助检测。 | ||||||||||
| Aura Botnet | 86 | 4 years ago | gpl-3.0 | C++ | ||||||
| A super portable botnet framework with a Django-based C2 server. The client is written in C++, with alternate clients written in Rust, Bash, and Powershell. | ||||||||||
| Malicious Urlv5 | 19 | 2 years ago | mit | Python | ||||||
| A multi-layered and multi-tiered Machine Learning security solution, it supports always on detection system, Django REST framework used, equipped with a web-browser extension that uses a REST API call. | ||||||||||
| Gencybercoin | 8 | 18 days ago | gpl-3.0 | JavaScript | ||||||
| GenCyberCoin is a project sponsored by NSA/NSF GenCyber program. A demo is deployed here: | ||||||||||
| Oxomium | 7 | 6 days ago | 9 | gpl-3.0 | Python | |||||
| Simple cybersecurity conformity tool for SECOPS and CISCO | ||||||||||
| Fir_async_plugin | 3 | 6 years ago | gpl-3.0 | Python | ||||||
| Asynchronous tasks and notifications in FIR | ||||||||||
| Django Security | 3 | 2 years ago | 1 | Python | ||||||
| Django is great! Here are some ways to make it safer | ||||||||||
| Hackbotone Website | 3 | 3 months ago | 1 | mit | CSS | |||||
| HackbotOne | Exploring Application Security & Software Development | ||||||||||
| Phishing Url V5 Ibm | 2 | 2 years ago | Python | |||||||
| Phishing Url detector, detects cyber thefts and cyber frauds using machine leaning and data science technology. TECH used- Python, Django(Backend), SQLite, IBM cloud, data science, machine learning. | ||||||||||
Watcher is a Django & React JS automated platform for discovering new potentially cybersecurity threats targeting your organisation.
It should be used on webservers and available on Docker.
Watcher capabilities
- Detecting emerging cybersecurity trends like new vulnerabilities, malwares... Via social networks & other RSS feeds (www.cert.ssi.gouv.fr, www.cert.europa.eu, www.us-cert.gov, www.cyber.gov.au...).
- Monitor for information leaks, for example in Pastebin & other IT content exchange websites (stackoverflow, github, gitlab, bitbucket, apkmirror, npm...).
- Monitor malicious domain names for changes (IPs, mail/MX records, web pages using TLSH).
- Detecting suspicious domain names targeting your organisation, using:
- dnstwist algorithm.
- Certificate transparency stream: certstream
Useful as a bundle regrouping threat hunting/intelligence automated features.
Additional features
- Create cases on TheHive and events on MISP.
- Integrated IOCs export to TheHive and MISP.
- LDAP & Local Authentication.
- Email notifications.
- Ticketing system feeding.
- Admin interface.
- Advance users permissions & groups.
Involved dependencies
Screenshots
Watcher provides a powerful user interface for data visualization and analysis. This interface can also be used to manage Watcher usage and to monitor its status.
Threats detection
Data leaks
Malicious domain names monitoring
IOCs export to TheHive & MISP
Suspicious domain names detection
Django provides a ready-to-use user interface for administrative activities. We all know how an admin interface is important for a web project: Users management, user group management, Watcher configuration, usage logs...
Admin interface
Installation
Create a new Watcher instance in ten minutes using Docker (see Installation Guide).
Platform architecture
Get involved
There are many ways to getting involved with Watcher:
- Report bugs by opening Issues on GitHub.
- Request new features or suggest ideas (via Issues).
- Create new features and make pull-requests. Process here.
- Discuss bugs, features, ideas or issues.
- Share Watcher to your community (Twitter, Facebook...).
Pastebin compliant
In order to use Watcher pastebin API feature, you need to subscribe to a pastebin pro account and whitelist Watcher public IP (see https://pastebin.com/doc_scraping_api).
