SpikeX
An Open-Source OSINT Framework
The problem SpikeX solves
SpikeX - Open Source OSINT Framework
Solutions to the Ethical Hackers
SpikeX is an open-source OSINT framework that is designed for manual web scanning, web scraping, and gathering comprehensive information from the internet. It provides a web interface with a GUI mode for testing and is a passive reconnaissance tool for cybersecurity and penetration testers. The tool is powered by the Shodan search engine and can gather a vast amount of data that will expand the attack surface of the penetration testers and provide fast threat intel. SpikeX is also a community project that provides **REST API** to other developers, allowing them to add more functionalities and use them. SpikeX offers several features that make it a valuable tool for cybersecurity professionals. It can be used for both manual and automated scans, making it versatile and flexible. The tool can assist security teams in carrying out vulnerability assessments and patching them before hackers have a chance to exploit them. The open-source nature of SpikeX means that developers are free to add more functionalities and use them. This allows the tool to evolve and adapt to the ever-changing landscape of cybersecurity threats. Overall, SpikeX is a valuable contribution to the open-source community and the development of software cultures.
Challenges we ran into
Attack Engine Development Stage
The Attack Engine that has designed by our team was completely based on Python Language. Being an ideal language for security tools development, the major issue faced was the networking part. SpikeX interacts with the target application to get value information about the server. While the interaction, the requests that are sent by the tool to the target server must be legit. This required a comprehensive study of the HTTP protocol and its implementations.
Flask Back-End Development
Flask being a much manual framework for backend development, the connection to the Front-End was one of the hardcore challenges that were faced.
Deployment Stage
Deployment was the tough one as it required connecting three techonologies on one way. This made it a work of patience to get the site accessible all over the internet.
Tracks Applied (4)
Best Beginners' Hack (All participants in the team must be first time hackers)
Crime Prevention
Most Creative Use of GitHub - MLH
Major League Hacking
Best Domain Name from GoDaddy Registry - MLH
Major League Hacking