reStalker

IOC and entities extractor.

Detection

reStalker can extract these entities from any binary or text source:

• Phone

• Email

• Digital assets

  • BTC Wallet

  • ETH Wallet

  • XMR Wallet

  • ZEC Wallet

  • DASH Wallet

  • DOT Wallet

  • XRP Wallet

  • BNB Wallet

• TW Account

• Tor URL

• I2P URL

• Freenet URL

• Zeronet URL

• IPFS URL

• Username

• Password

• Base64

• OwnName

• Telegram URL

• Whatsapp URL

• Skype URL

• Paste

• MD5

• SHA1

• SHA256

Install

Console:

pip3 install "restalker<3"

In requeriments.txt:

• Production

restalker<3

• Development

git+https://github.com/junquera/restalker.git#egg=restalker

Usage

import restalker

# Define which elements we desire
# for example Tor URLs
s = restalker.reStalker(tor=True, i2p=True)

elements = s.parse(input_text)

for element in elements:
    print("[*] Darknet IOC found:", element)

Acknowledgements

Byron Labs is an active supporter of the reStalker development.