
Research
/Security News
60 Malicious Ruby Gems Used in Targeted Credential Theft Campaign
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
github.com/kevincobain2000/aketemite
Simple tool written in Go, to ping urls and get the status code.
Monitor up status for websites, api and URLs, with automatic crawling capability.
Quick Setup: One command to ping multiple urls and monitor result.
Monitor periodically: Monitor the urls periodically and get the status code.
Crawling capability: Crawls entire page, finds the links and obtains the status code.
Beautiful: Beautiful and simple dashboard.
Step 1) Install aketemite
curl -sLk https://raw.githubusercontent.com/kevincobain2000/aketemite/master/install.sh | sh
Step 2) Prepare config.yml
# config.yml
urls:
- name: https://kevincobain2000.github.io
timeout: 2000
crawl: false
- name: https://kevincobain2000.github.io/404
timeout: 2000
crawl: true
- name: https://coveritup.app
timeout: 2000
crawl: true
- name: https://github.com
timeout: 2000
crawl: false
Step 3) Start application
./aketemite --config=path=config.yml
Step 4) Confirm application
UI: localhost:3000/aketemite
API: localhost:3000/aketemite/api
Logs: tail -f logs/aketemite.log
Usage of ./aketemite:
Example ./aketemite --config-path=config.yml --port=3000 --delete-cache --cache-dir=/tmp/aketemite
-cache-dir string
cache dir (default "/tmp/aketemite")
-config-path string
config path (default "config.yml")
-delete-cache
delete cache
-ping-freq uint
ping frequency (default 300)
-port string
port to serve (default "3001")
API
#starts api on port localhost:3001/aketemite/api
air
UI
cd ui/
npm install
#starts ui on port localhost:3001/aketemite
npm run dev
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.
Research
/Security News
Two npm packages masquerading as WhatsApp developer libraries include a kill switch that deletes all files if the phone number isn’t whitelisted.