gossan-intel 0.3.3

Global Passive and Active Intel pillar for Gossan, part of the security research ecosystem
docs.rs failed to build gossan-intel-0.3.3
Please check the build logs for more information.
See Builds for ideas on how to fix a failed build, or Metadata for how to configure docs.rs builds.
If you believe this is docs.rs' fault, open an issue.
Visit the last successful build: gossan-intel-0.3.2

gossan-intel

Global passive intel for Gossan, pulls IP / domain enrichment from local bulk datasets and configured external sources without ever sending packets to the target.

Sources

  • Censys (search.censys.io)
  • Shodan
  • Passive DNS (CIRCL / DNSDB / PassiveTotal-shaped endpoint)
  • GreyNoise
  • VirusTotal
  • Local bulk SQLite index for offline lookups

Each source is a dyn IntelSource and is registered in IntelScanner::from_config based on which API keys / endpoints are present in Config. Missing keys are logged at INFO and the source is skipped: no scan failure.

Output

Findings are emitted with kind = InfoDisclosure and tagged intel plus the source name (intel, censys, shodan, etc.) so downstream correlation can dedupe across providers.

License

MIT