ShadowTrackr API for Python
ShadowTrackr is a service that discovers your online attack surface and displays it in a nice graph. Anything found will be monitored for security issues. You can enable notifications by email or push messages, or just ingest them in your SIEM.
All changes to your hosts, websites, certificates, dns and whois records are logged and searchable. Additionally, you can set specific alerts for keywords or events that you want to monitor, for instance a username appearing in leaked data on pastebin.
The API allows you to integrate ShadowTrackr with your other security tools. There are multiple endpoints, but by far the easiest way to gets started is using serach queries. We support both Splunk SPL and Elastic Search (Lucene) syntax thatyou don't have to learn yet another new query language.
More information:
https://shadowtrackr.com/docs/2-Data-Model
https://shadowtrackr.com/docs/3-Search-and-Queries
Installation::
pip install shadowtrackr
Usage::
from shadowtrackr import ShadowTrackr
from pprint import pprint
# first, setup the api with your API key
# you'll find it at: https://shadowtrackr.com/usr/settings?s=api
st = ShadowTrackr(api_key=API_KEY)
certificate_issuers = st.query("index=certificates by issuer earliest=-10d")
pprint(certificate_issuers)
problem_hosts = st.query("index=hosts problem=yes earliest=-1m")
pprint(problem_hosts)
hosts_with_rdp_open = st.query("index=hosts ports=3389")
pprint(hosts_with_rdp_open)
all_spf_records = st.query("index=dns rrtype=txt rrdata=\"*spf*\"")
pprint(all_spf_records)
websites_on_nginx = st.query("index=websites https_server=*nginx*")
pprint(websites_on_nginx)
good_certificates = st.query("index=certificates grade=A earliest=-1m")
pprint(good_certificates)
all_whois_records = st.query("index=whois")
pprint(all_whois_records)
If you need to use a proxy, you can set it like this:
st.set_proxy("10.0.0.1:8080")
You can find the complete API documentation at https://shadowtrackr.com/docs/5-API
If you have any questions or requests, please send them here: https://shadowtrackr.com/support
1 maintainer
Metadata
1 maintainer
Release files for shadowtrackr 5.7
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| shadowtrackr-5.7.tar.gz | 6.6 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| shadowtrackr-5.7-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 12.4 kB
Release files / shadowtrackr-5.7.tar.gz
| Download URL | shadowtrackr-5.7.tar.gz |
|---|---|
| Size | 6.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4767fbbbf7461d7045962b122129807de008d3014f005a8518b701929c7b9d5b
|
|
BLAKE2b-256 checksum How to use checksums |
c40d2be50c3c02939c7f090379c3b12d27117c557b3869b628cf741c0bc6e990
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.4
|
Release files / shadowtrackr-5.7-py3-none-any.whl
| Download URL | shadowtrackr-5.7-py3-none-any.whl |
|---|---|
| Size | 5.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
2e1a4f79fa3bbea4251843d5ce0aa0b732bd9221d1f0fd5ab6d52a21f1bd74e4
|
|
BLAKE2b-256 checksum How to use checksums |
5436d3a508abe6cc37240ca6cd8135f026e742f1eb22e88782f4fcc0ab353a13
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.4
|
