User Tools

Site Tools


api

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
api [2024/02/08 15:00]
kaduuwikiadmin [API Script]
api [2025/04/27 15:47] (current)
kaduuwikiadmin [API Script to find and extracts accounts in leaks]
Line 3: Line 3:
 ===== Introduction ===== ===== Introduction =====
  
-Kaduu consists of two plattforms:+Kaduu consists of different plattforms:
  
   * Deepweb (https://deepweb.leak.center)   * Deepweb (https://deepweb.leak.center)
   * Control (https://control.leak.center)   * Control (https://control.leak.center)
 +  * Central API https://client-api.leak.center/swagger/
  
-Deepweb is used for live queries that can take up to 3 hours. Control is mainly DB driven. API access is currently only available for "Control". Control uses a REST API which you can reach via SSL+Deepweb is mostly used for live queries that can take up to 3 hours. Control is mainly DB driven. 
  
-===== API Documentation =====+===== API Limit ===== 
 + 
 +On control.leak.center, each account is allowed up to 10,000 API queries per day (within 24 h), which theoretically amounts to 300,000 queries per month. However, we apply a soft commercial limit of 100,000 queries per month as a fair use guideline. 
 + 
 +This limit is not strictly enforced. If your usage consistently exceeds this threshold, we may contact you to discuss your API needs. 
 + 
 +===== API Documentation control.leak.center =====
  
 Please find two API documentations here:  Please find two API documentations here: 
Line 55: Line 62:
  
  
-===== API Script ===== 
- 
- 
-The customer has various options in Kaduu for accessing the query data: 
-  * Via dashboard: data can be displayed and then exported (CSV, XML, DOCX etc) 
-  * Via webhook 
-  * Via REST API 
-  * Via alerting (email) 
- 
-The REST API allows you great flexibility in automation and integration into your existing processes and applications. In this chapter we illustrate how the API can be used with a customizable Python script which could assist you with few business use cases: 
  
-  * White labeled alerts: You use Kaduu to regularly provide end customers or specific people with email alerts on certain topics (e.g. leaked data). To do this, you want to use an email with your design, company name and structure and also send this via your infrastructure. +===== API Script to extract leaks and save it to CSV =====
-  * Ticketing System Integration: You want to integrate Kaduu into your existing environment and create tickets or incidents automatically in Splunk, Jira, Slack or similar systems. +
-  * Automated Output Parsing: You want to store all results for certain search queries daily in an easy-to-process format (CSV, XLS, etc.) locally in a folder of your choice for analysis and further processing. +
-  * Reduce Workload in Alerting: You want to save time when using Kaduu's email alerts: Instead of logging into the system for email alerts and researching the cause of the alerts, you want to receive the specific raw data of the alerts via email.+
  
-You can learn more in the {{ :readme.docx |readme.docx}} or {{{{ ::api_sample_script.zip |download the python files}}}}.+{{ ::query_leaks.zip |The Leak Center Query Tool}} is a Python script that interacts with the Leak Center API to fetch and process leaked data. It supports authentication using credentials provided interactively or through an optional auth.txt file, which must be formatted as username,password. The script queries for a target domain, which can be supplied interactively or via an input.txt file. Optionally, a date range can be specified through a DateRange.txt file or interactively; if skipped, no date filter is applied. The script normalizes different date formats, such as yyyy.mm.dd, yy.mm.dd, or yyyy-mm-dd, into a format compatible with the backend.
  
 +The script processes paginated responses from the API and writes the results to a CSV file, Leaks.csv, with structured headers including id, createdAt, content, fileName, and more. 
  
 +===== API Script to find and extracts accounts in leaks =====
  
 +This script is designed to help users search through data leaks for specific information like email addresses and passwords. It automates the process of logging into the Leak Center's API service, where the leaks are stored. Once logged in, the script uses search criteria specified by the user (such as particular tags that might relate to the type of information they're interested in, e.g., "accounts") to find relevant data within the leaks. Please check the readme inside the script for more details. {{ ::leakapi_v3.zip |Download the file here.}}
api.1707400853.txt.gz · Last modified: 2024/02/08 15:00 by kaduuwikiadmin