pyWhat: Identify Anything, Emails, IP addresses, and More
Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it’ll tell you what it is!
What is this?
Imagine this: You come across some mysterious text 5f4dcc3b5aa765d61d8327deb882cf99 and you wonder what it is. What do you do?
Well, with what all you have to do is ask
and what will tell you!
what‘s job is to identify what something is. Whether it be a file or text! Or even the hex of a file! What about text within files? We have that too! what is recursive, it will identify everything in text and more!
You come across a new piece of malware called WantToCry. You think back to Wannacry and remember it was stopped because a researcher found a kill-switch in the code.
When a domain, hardcoded into Wannacry, was registered the virus would stop.
You use What to identify all the domains in the malware, and use a domain registrar API to register all the domains. If Wannacry happens again, you can stop it in minutes – not weeks.
Faster Analysis of Pcap files
Say you have a .pcap file from a network attack. What can identify this and quickly find you:
Credit card numbers
Social Security Numbers
and much more.
With what, you can identify the important things in the pcap in seconds, not minutes.
Anytime you have a file and you want to find structured data in it that’s useful, What is for you.