horuz

Save and query your recon data on ElasticSearch.


Keywords
recon, elasticsearch
License
MIT
Install
pip install horuz==0.0.9

Documentation

Horuz!. Save and query your recon data on ElasticSearch.

Installing

Install and setting up ElasticSearch

https://www.elastic.co/guide/en/elasticsearch/reference/current/install-elasticsearch.html

Install and setting up Horuz

$ pip3 install horuz

$ hz config server:add http://yourelasticsearchendpoint:9200

Usage

$ hz --help

$ hz config server:status
ElasticSearch is connected to http://localhost:9200 successfully!

Collect data examples

Using ffuf

Custom integration with ffuf.

$ hz collect -p x.com -c "ffuf -w ~/SecLists/Discovery/Web-Content/common.txt -u https://example.com/FUZZ"

Custom JSON files

In this example, we have an httprobe.txt file, then it will be transformed to JSON file.

$ cat httprobe.txt | jq -Rnc '[inputs|split("\n")|{("host"):.[0]}]' > httprobe.json

Then, upload it to ES.

$ hz collect -p att_probe_ex -f httprobe.json
â ¦ Collecting...
Session name: gallant_satoshi_8455236

Results: 1366

$ hz search -p att_probe_ex -q "session:gallant_satoshi_8455236" -oJ -f time,host -s 2
[   
    {   
        "host": "https://atracciondetalento.att.com.mx",
        "time": "2020-07-14T20:35:04.668051"
    },
    {   
        "host": "https://foro.att.com.mx",
        "time": "2020-07-14T20:35:04.663304"
    }
]

Query search examples

Search by range dates:

$ hz search -p x.com -q "time:[2020-04-15 TO 2020-05-20]"

Search by wildcard in the field

$ hz search -p x.com -q "result.html:*key*" -oJ -f html

Pipe the result to other commands

$ hz search -p yahoo.com -q "session:*" -oJ -f _id,session,time | jq ".[].session" | sort -