From 268df91e3ced5ca92e21c83021d6b431190656a6 Mon Sep 17 00:00:00 2001 From: Harald Eilertsen Date: Tue, 7 May 2019 22:40:47 +0200 Subject: Initial commit. --- src/lib.rs | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ src/main.rs | 39 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 93 insertions(+) create mode 100644 src/lib.rs create mode 100644 src/main.rs (limited to 'src') diff --git a/src/lib.rs b/src/lib.rs new file mode 100644 index 0000000..45add28 --- /dev/null +++ b/src/lib.rs @@ -0,0 +1,54 @@ +// A program to scan emails for phishing links. +// Copyright (C) 2019 Harald Eilertsen +// +// This program is free software: you can redistribute it and/or modify +// it under the terms of the GNU General Public License as published by +// the Free Software Foundation, either version 3 of the License, or +// (at your option) any later version. +// +// This program is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU General Public License for more details. +// +// You should have received a copy of the GNU General Public License +// along with this program. If not, see . + +use chrono::{ DateTime, Utc }; +use serde::Deserialize; +use serde_json; +use std::io::{ BufRead, Result }; +use std::net::IpAddr; + +#[derive(Deserialize)] +pub struct PhishTank { + pub phishes: Vec, +} + +#[derive(Deserialize)] +pub struct Phish { + pub phish_id: String, + pub url: String, + pub phish_detail_url: String, + pub submission_time: DateTime, + pub verified: String, + pub verified_time: Option>, + pub online: String, + pub target: String, + pub details: Vec, +} + +#[derive(Deserialize)] +pub struct PhishDetails { + pub ip_address: IpAddr, + pub cidr_block: String, + pub announcing_network: String, + pub rir: String, + pub country: String, + pub detail_time: DateTime, +} + +pub fn load_phistank(input: R) -> Result { + let phishes = serde_json::from_reader(input)?; + Ok(PhishTank { phishes }) +} diff --git a/src/main.rs b/src/main.rs new file mode 100644 index 0000000..4e3076b --- /dev/null +++ b/src/main.rs @@ -0,0 +1,39 @@ +// A program to scan emails for phishing links. +// Copyright (C) 2019 Harald Eilertsen +// +// This program is free software: you can redistribute it and/or modify +// it under the terms of the GNU General Public License as published by +// the Free Software Foundation, either version 3 of the License, or +// (at your option) any later version. +// +// This program is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU General Public License for more details. +// +// You should have received a copy of the GNU General Public License +// along with this program. If not, see . + +use phisher; +use clap::{clap_app, crate_name, crate_authors, crate_version, crate_description}; +use std::fs::File; +use std::io::BufReader; +use std::time::SystemTime; + +fn main() { + let args = clap_app!(app => + (name: crate_name!()) + (version: crate_version!()) + (author: crate_authors!()) + (about: crate_description!()) + (@arg PHISHTANK: --phishtank +required +takes_value "The phishtank json data file to use.") + ).get_matches(); + + let start_time = SystemTime::now(); + let r = BufReader::new(File::open(args.value_of("PHISHTANK").unwrap()).unwrap()); + let tank = phisher::load_phistank(r).unwrap(); + + println!("Loaded {} phishes in {} seconds!", + tank.phishes.len(), + start_time.elapsed().unwrap().as_secs()); +} -- cgit v1.2.3