package
2.5.8+incompatible
Repository: https://github.com/cert-lv/graphoscope.git
Documentation: pkg.go.dev

# README

Pastelyzer plugin

Plugin to query Pastelyzer (https://github.com/cert-lv/pastelyzer) as a data source.

Sample command to use plugin:

# Get paste IDs where IP 8.8.8.8 was mentioned
curl 'https://localhost:443/api?uuid=auth-key&sql=FROM+pastelyzer+WHERE+ip=%278.8.8.8%27'
# Get all artefacts of the given paste ID
curl 'https://localhost:443/api?uuid=auth-key&sql=FROM+pastelyzer+WHERE+source=35853628'

As there is no way to get automatically all the possible fields to query (for the Web GUI autocomplete) - such artefacts are:

  • cc-number
  • credential
  • domain
  • email
  • ip
  • onion
  • sha1
  • any

Compile with:

go build -buildmode=plugin -ldflags="-w" -o pastelyzer.so ./*.go

Access details

Source YAML definition's access fields:

  • url: HTTP access point, for example - http://localhost:7000