Skip to content
LeakLooker GUI - Discover, browse and monitor database/source code leaks
JavaScript CSS HTML Python
Branch: master
Clone or download

Latest commit

Latest commit 268d8c9 Mar 22, 2020

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
leaklooker Small fix + cheatsheet Mar 22, 2020
leaklooker_app Initial commit Mar 20, 2020
README.md Readme Mar 22, 2020
cheatsheet.md Small fix + cheatsheet Mar 22, 2020
config.json Initial commit Mar 20, 2020
manage.py Initial commit Mar 20, 2020
requirements.txt Initial commit Mar 20, 2020

README.md

LeakLooker X - GUI

Powered by Binary Edge

Discover, browse and monitor database/source code leaks

Write-up https://medium.com/@woj_ciech/leaklooker-gui-discover-browse-and-monitor-database-source-code-leaks-f4b82bbb48fe

Requirements

  • python3
  • Binary Edge paid plan
  • django
  • celery
  • redis
  • BeautifulSoup
pip install -r requirements.txt

Install & Run

  • Paste your Binary Edge api key into config.json
  • Paste your gmail email and password in case you want to use monitoring feature
python3 manage.py makemigrations
python3 manage.py migrate
python3 manage.py runserver

n a new window fire up redis

apt-get install redis redis-server

redis-server

In a new window (in main directory) run

celery worker -A leaklooker --loglevel=info

For scheduling task (monitoring) run also

celery -A leaklooker beat --loglevel=info

I

And server should be available on https://localhost:8000/

Guide

Useful commands https://github.com/woj-ciech/LeakLooker-X/blob/master/cheatsheet.md

Dashboard

Dashboard shows chart of retrieved databases by type

Number of confirmed/for later findings

Binary Edge credits and total amount of records in database

Progress of checking MongoDB/Cassandra/Rethink/Elastic (% of findings marked as confirmed or for later)

Random leaks by type (not confirmed nor marked for later)

Findings marked "for later" for the same random type

Notifications

Discover

  • by type

Orange "count" button counts amount of records in your database

Blue "count" button counts amount in Binary Edge

  • by keyword & network & all types at once

If there are no results (due to blacklist or they are already in db) you will be informed

Browse

  • by type (recommended)

  • whole database

Red button deletes record and put it in blacklist so it will be never displayed again

Green button confirms finding

Blue button marks it as "for later review"

Monitor

It will sent mail every 24 hours with new findings based on provided keywords/network.

It compares new results with database and blacklist and sends only new findings.

Queries

"gitlab": "title:%22gitlab%22%20AND%20web.body.content:%22register%22",
"elastic": "type:%22elasticsearch%22",
"dirs": "title:%22Index of /%22",
"jenkins": "title:%22Dashboard [Jenkins]%22",
"mongo": "type:%22mongodb%22",
"rsync": "port:873 @RSYNCD",
'sonarqube': "title:SonarQube",
'couchdb': "product:couchdb",
"kibana": "product:kibana",
"cassandra": "type:cassandra",
"rethink": "type:rethinkdb"

Additional

  • I am not responsible for any damage caused by using the tool
  • You must login to the gmail account via browser first to use monitoring
  • If something does not work or you have an idea raise an issue
  • Tested on Kali Linux on newest browser
  • All credits for template goes to ColorLib
You can’t perform that action at this time.