{"repo":"COSSAS/bigphish","free":true,"listed":false,"github":"https://github.com/COSSAS/bigphish","clone":"git clone https://github.com/COSSAS/bigphish.git","description":"BigPhish - An all-in-one solution to identify and monitor phishing kit deployment","language":"Python","stars":15,"topics":["phishing","phishing-detection","phishing-kit","certificate-transparency","crawler"],"license":"Apache-2.0","category":"scrapers-browser-automation","readme_excerpt":"An all-in-one solution to identify and monitor phishing kit deployment All COSSAS projects are hosted on GitLab with a push mirror to GitHub. For issues/contributions check CONTRIBUTING.md What is it? BigPhish is an application developed for Internet researchers and law enforcement professionals to study the deployment of phishing kits in the wild. This software product originates from a 2021 USENIX paper, which proposed a method to discover new phishing domains by leveraging Certificate Transparency (CT) logs. By continuously monitoring these logs and crawling potential phishing domains, it can identify and monitor domains that have been set up with a phishing kit. Phishing kits are identified by searching for fingerprints, which are unique file paths associated with those kits. BigPhish offers an all-in-one solution for monitoring CT logs, crawling domains, storing them in Elasticsearch and a Web application to interact with the results. System architecture BigPhish consists of 10 modules, some off-the-shelf and some custom build. Each module functions within its own Docker container: 1. Certscanner detects potential phishing domains from a stream of TLS certificates. Read more about this module in the respective README. 2. Crawler automatically visits the potential phishing domains, analyzes them, and tries to identify the used phishing kit. Read more about this module in the respective README. 3. Elasticsearch index storage to store all gathered information. 4. Kibana for","default_branch":null,"files":null,"tree":[],"storefront":"/r/COSSAS","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/COSSAS/bigphish/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}