
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
A sentiment analysis server implementation. Designed to be extendable, so new algorithms and sources can be used.
This tool will take several input formats and translates them to semantic formats. It focuses on translating corpora to the NIF+Marl format, using json-ld.
DoCon is under heavy development. As of this writing, it supports:
In the future, we might include the following features:
Documents can be translated via the Web Interface, through the REST interface, or via Command-Line.
DoCon's endpoint takes these parameters:
Using the command line tool curl, a request can be made like this:
curl -F"template=Example_to_Marl" -F"input=@input-file.csv" -F"intype=FILE"
http://demos.gsi.dit.upm.es/docon/process
> result.jsonld
DoCon templates are custom jinja2 templates with syntactic sugar, custom preferences and functions to deal with different document types.
For instance, this is a template that prints each cell in a csv file in a separate line, adding a dashed line between rows:
{% set file = open_file(informat="csv", delimiter=',') %}
{% for row in file %}
{% for item in row %}
{{ item.strip() }}
{% endfor %}
{{ "------" if not loop.last }}
{% endfor %}
This is the alternative and cleaner form of the same template using jinja's line expressions:
% set file = open_file(informat="csv", delimiter=',')
% for row in file
% for item in row
{{ item.strip() }}
% endfor
{{ "------" if not loop.last }}
% endfor
In addition to providing an endpoint, this tool can be used directly in the command line. Just install the package and run:
docon -i <file to be converted> --template <conversion template> -o <output>
If you don't want to install the package, you can also run it like a normal python module:
python -m docon.cli -i <file to be converted> --template <conversion template> -o <output>
The easy way:
pip install docon
That will allow you to use the CLI tool right away. So far, if you want to run the server, you will need to run your own wsgi script or copy wsgi.py from this repository.
To install it from source, follow these steps:
pip install -r requirements.txt
python manage.py runserver localhost:<PORT>
If the standalone server works, you can try serving the portal via apache/nginx and WSGI. It has been tested with apache2 and uwsgi. In that case you will also need to serve the static files from your web server. An example configuration for Apache2 would be:
<VirtualHost *:80>
[ ... ]
WSGIScriptAlias /docon /path_to_docon/wsgi.py
WSGIDaemonProcess docon user=www-data group=www-data processes=nprocesses threads=nthreads python-path=/path_to_docon:/path_to_docon/venv/lib/python2.7/site-packages
WSGIProcessGroup docon
<Directory /path_to_docon>
Order allow,deny
Allow from all
</Directory>
Alias /docon/robots.txt /path_to_docon/static/robots.txt
Alias /docon/favicon.ico /path_to_docon/static/favicon.ico
AliasMatch ^docon/([^/]*\.css) /path_to_docon/static/styles/$1
Alias /docon/media/ /path_to_docon/media/
Alias /docon/static/ /path_to_docon/static/
<Directory /path_to_docon/static>
Order deny,allow
Allow from all
Options -Indexes
</Directory>
<Directory /path_to_docon/media>
Order deny,allow
Allow from all
Options -Indexes
</Directory>
</VirtualHost>
EUROSENTIMENT PROJECT Grant Agreement no: 296277 Starting date: 01/09/2012 Project duration: 24 months
FAQs
A sentiment analysis server implementation. Designed to be extendable, so new algorithms and sources can be used.
We found that docon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.