infobyte / emploleaks

An OSINT tool that helps detect members of a company with leaked credentials
https://fardadaysec.com
518 stars 47 forks source link

Creating index Error #15

Open Shellshock9001 opened 11 months ago

Shellshock9001 commented 11 months ago

This is the error I got after waiting a hour + for the COMB to import lol. I am running kali linux. The data folder does exist.

image

By the way. Do i have to import this COMB each time or where do I find it at on my linux system?

lupulabs commented 11 months ago

all the files in the COMB databases are sanitized before put in the postgresql database. I can see in your image that the file 9.csv has a malformed entry, only in that file did you receive the alert?

you need to do this job only once

Shellshock9001 commented 11 months ago

all the files in the COMB databases are sanitized before put in the postgresql database. I can see in your image that the file 9.csv has a malformed entry, only in that file did you receive the alert?

you need to do this job only once

No. I didn't see that in the steps ? I just did the create_db command. All the files are actually malformed.

When these files get imported to the database do they get stored taking up memory? As in I already used memory to save the entire COMB. Will I need more memory to import the comb into the database?

lupulabs commented 11 months ago

What kind of arguments do you have? the -comb have the path to the downloaded folders? Could you share with us a view of what kind of folders do you have in /media/SOMETHING?

why do you blur your username?

Shellshock9001 commented 11 months ago

I don't know it just feels weird showing my user name XD

But I tried to create the db with the comb downloaded onto my kali linux machine and it was still malformed. Then I tried to create the db from the samsung flash drive i have to save space on my kali linux machine. but its still malformed.

You can see the path where the comb is on the samsung drive.

image

Heres all the files in the comb

image

Was I supposed to not rename the comb folder? Leave it as CompilationOfManyBreaches ? I just unpacked the war file and put it all in a folder named Breaches.

Also after naming the db to what I want i get these errors. Its looking for a database named postgres? but it still starts to import

image

You can see here that I am able to connect to my database

image

The run find is working fine. It is pulling the employees down just fine now.

Shellshock9001 commented 11 months ago

You'll see here that the run find works and pulls all the employees but then when i run the run_pyscript workflows/check_leaked_passwords.py against the same company, it says they do not exist.

image

I noticed something happens with the JSESSIONID after you run the run_pyscript in workflows. So far I have only noticed when it brings up a company that does not exist. But it says JSESSION is not setted. You have to keep doing setopt JSESSIONID after a company does not exist.

After I set the JSESSIONID again with setopt JSESSION ID I run impersonate again Then it comes back as setting for the first time and working again. You'll see in this photo.

image

I also just noticed that there is a typo for patient. It says "The following command could take a couple of minutes, be pacient" in the command line.

lupulabs commented 11 months ago

Maybe would be easier make a call to solve this issue, email me to jaguinaga@faradaysec.com to coordinate it