Seray-D/darkweb-leak-monitoring

# 暗网泄露监控 暗网泄露监控是一款现代化的**威胁情报面板**应用程序，专为组织和个人设计，用于监控泄露的凭证、威胁情报动态以及暗网数据泄露事件。该项目由一个功能强大的 **FastAPI** 后端和一个简洁的 **Next.js** 前端界面组成。 ## 项目目录结构 ``` MonitorLeaks.dev/ ├── app/ # Next.js Frontend Application │ ├── components/ # UI Components (LeakTable, FilterBar, Badge, etc.) │ ├── lib/ # Utilities, types, and API clients │ ├── layout.tsx # Root layout structure │ └── page.tsx # Main dashboard view ├── services/ # External Service Integrations & Adapters │ ├── breachdirectory_service.py │ ├── dns_service.py # Domain TXT verification service │ ├── leakcheck_service.py │ ├── leakix_service.py │ ├── notification_service.py # Telegram / Slack notifications │ ├── otx_service.py # AlienVault OTX integration │ ├── xposed_adapter.py │ └── xposed_service.py # XposedOrNot integration ├── database.py # SQLite database connection and session management ├── models.py # SQLAlchemy ORM models (BreachLog, MonitoredAsset, etc.) ├── schemas.py # Pydantic data validation schemas ├── main.py # FastAPI core application and endpoints ├── config.py # Configuration and environment variable management └── requirements.txt # Python dependencies ## 技术与 Services ### Backend * **FastAPI:** High-performance, asynchronous Python web framework. * **SQLAlchemy & SQLite:** Lightweight and secure database management. * **APScheduler:** Automated background asset scans at configurable intervals. * **HTTPX:** Asynchronous client for external API requests. ### Frontend * **Next.js (App Router):** Modern and fast React-based framework. * **Tailwind CSS:** Flexible and elegant styling components. ### 集成 Services * **XposedOrNot API:** Email and organization-based breach scanning. * **LeakCheck API:** In-depth email and account leak analysis. * **AlienVault OTX:** Domain and indicator of compromise (IoC) enrichment. * **LeakIX:** Open service and data leak exposure scanning. * **BreachDirectory:** Alternative breach directory search. --- ## 安装与设置 ### 1. Backend 设置 Clone the repository, navigate to the backend directory, and install dependencies: ```bash pip install -r requirements.txt ### 2. 环境变量 (.env) Create a `.env` file in the root directory and configure your API keys and parameters: ```env ASSET_SCAN_INTERVAL_HOURS=24 XPOSED_API_KEY=your_key_here LEAKCHECK_API_KEY=your_key_here OTX_API_KEY=your_key_here LEAKIX_API_KEY=your_key_here ### 3. 运行 Backend Start the FastAPI application using `uvicorn`: ```bash python -m uvicorn main:app --reload ### 4. Frontend 设置 Navigate to the frontend directory (`app` or your frontend root), install dependencies, and run the development server: ```bash npm install npm run dev ### 核心功能 * **Multi-Asset Monitoring:** Register email addresses and domains to track them via periodic scans. * **DNS TXT Verification:** Verify domain ownership securely using DNS TXT records. * **Live Scanning & Deduplication (Dedup):** Results fetched concurrently from multiple services are automatically cleaned, filtered, and deduplicated before persisting to the database. * **Real-time Notifications:** Receive instant breach alerts via Telegram or Slack integrations. * **Password Security (HIBP):** Check password safety leveraging the Have IBeenPwned range API. ```

标签：自动化攻击, 逆向工具