v0.5.0

What's New in v0.5.0 🎉

• API Upgrade: Switched from the VirusTotal API to the Driftnet API for better DNS record retrieval.
• Environment Variable: The -pa argument now requires the DRIFTNET_API environment variable to be configured.
• Code Cleanup: Streamlined and optimized the codebase for better performance and readability.

Full Changelog: v0.4.1...v0.5.0

v0.4.1

What's new in v0.4.1 🎉 ?

• Changed from HackerTarget API to Driftnet API for better free plan and more flexibility in the responses. Get your Driftnet API Key under https://driftnet.io in order to use the -pa argument.
• Improved error handling

v0.4.0

What's new in v0.4.0 🎉 ?

• Rewrote the entire codebase of Elyzer for better scalability and flexibility. A new folder named "core" now contains all the essential functions required for Elyzer to work properly.

• Three new arguments (switches) are now available, implemented following the request in Issue #4 (thanks to @0CM):

  -pa: Performs all DNS lookups passively through VirusTotal and HackerTarget. You will need to provide your own VirusTotal API Key. This improves your OPSEC but may impact the accuracy of your results.

  -nd: Disables DNS lookups entirely, similar to a "paranoid mode" for optimal OPSEC. This will significantly impact your results, as some spoofing checks require DNS resolution.

  -j: An experimental feature that allows saving results in a JSON file. This only works with the entire spoofing function enabled and is not compatible with -pa or -nd at this time.

Full Changelog: v0.3.4...v0.4.0

v0.3.4

What's new in v0.3.4 ? 🎉

• Added new Message-ID field mismatch detection. The domain from the message-id field should be the same as in the from field. This is not necessary always the case, but it could be an indicator of a spoofing attempt.
• Improved output in the report file.

Full Changelog: v0.3.3...v0.3.4

v0.3.3

• New "-a" argument which can take a file, build a sha256 hash and give you a VT Link to check if it is malicious or not.
• Exception handling

Full Changelog: v0.3.2...v0.3.3

v0.3.2

• Added Update Check functionality
• Decoded the 'Subject' Field in order to get the real subject of the email
• All results are now saved in a file which is in the directory where you execute the script.

v0.3.1

• Added new "delta" feature which shows you the delta between each timestamp during hops.
• Fixes & improvments in output.

v0.3

• Improvements for Spoofing detection. Elzyer can now go deeper into SPF Record analysis. Elyzer can also go "two levels" deep into the "include" values of SPF records.

v0.2

Fix:

• Problem with proxys being shown as localhost.

v0.1

Release of Elyzer v0.1