mitaka

Browser extension that makes threat intel lookups from selected IOCs one click away.

Mitaka

Build Status CodeFactor Coverage Status

Mitaka is a browser extension that makes your OSINT (Open Source Intelligence) search & scan easier.

demo

  • Key features:
    • Auto IoC (indicators of compromise) selection with refanging.
      • E.g. example[.]com to example.com, test[at]example.com to test@example.com, hxxp://example.com to http://example.com, etc.
    • Supports 65+ services.

Install

Chrome

Firefox

Features

Supported IoCs (Indicators of Compromise)

NameDesc.E.g.
ANSASNAS13335
BTCBTC address1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa
CVECVE numberCVE-2018-11776
DomainDomain namegithub.com
EmailEmail addresstest@test.com
ETHEthereum address0x32be343b94f860124dc4fee278fdcbd38c102d88
GaPubIDGoogle Adsense Publisher IDpub-9383614236930773
GaTrackIDGoogle Analytics Tracker IDUA-67609351-1
HashMD5, SHA1, SHA25644d88612fea8a8f36de82e1278abb02f
IPIPv4 address8.8.8.8
URLURLhttps://github.com

Supported Search Engines

NameURLSupported types
AbuseIPDBhttps://www.abuseipdb.comIP
AnyRunhttps://app.any.runHash
archive.orghttps://archive.orgURL
Blockchain.comhttps://www.blockchain.comBTC
BlockCypherhttps://live.blockcypher.comBTC
Censyshttps://censys.ioIP, domain, ASN, email
Checkphishhttps://checkphish.aiIP, domain
Coalitionhttps://ess.coalitioninc.comCVE
crt.shhttps://crt.shDomain
CVEhttps://cve.orgCVE
DNS Coffeehttps://dns.coffeeDomain
DNSlyticshttps://search.dnslytics.comIP, domain
DomainToolshttps://www.domaintools.comIP, domain
EmailRephttps://emailrep.ioEmail
Google Safe Browsinghttps://transparencyreport.google.comDomain, URL
GreyNoisehttps://viz.greynoise.ioIP, domain, ASN, CVE
Host.iohttps://host.ioDomain
Hurricane Electrichttps://bgp.he.net/IP, domain, ASN
HybridAnalysishttps://www.hybrid-analysis.comIP, domain, hash
Intezerhttps://analyze.intezer.comHash
IPinfohttps://ipinfo.ioIP, ASN
Joe Sandboxhttps://www.joesandbox.comHash
Maltiversehttps://www.maltiverse.comDomain, hash
MalwareBazaarhttps://bazaar.abuse.chHash
NVDhttps://nvd.nist.govCVE
OOCPRhttps://data.occrp.orgEmail
OpenTIPhttps://opentip.kaspersky.comHash
OTXhttps://otx.alienvault.comIP, domain, CVE, URL, hash
Pulsedivehttps://pulsedive.comIP, domain, URL, hash
Radarhttps://radar.cloudflare.comIP, domain
Robtexhttps://www.robtex.comIP, domain
SecurityTrailshttps://securitytrails.comIP, domain
Shodanhttps://www.shodan.ioIP, domain, ASN
Sploitushttps://sploitus.comCVE
SpyOnWebhttps://spyonweb.netIP, domain, gaPubID, gaTrackID
Taloshttps://talosintelligence.comIP, domain
ThreatBookhttps://threatbook.ioIP, domain
ThreatConnecthttps://app.threatconnect.comIP, domain, email
ThreatMinerhttps://www.threatminer.orgIP, domain, hash
TIPhttps://threatintelligenceplatform.comIP, domain
Triagehttps://tria.geHash, URL
URLhaushttps://urlhaus.abuse.chIP, domain
urlscan.iohttps://urlscan.ioIP, domain, ASN, URL
URLVoidhttps://www.urlvoid.comDomain
ViewDNShttps://viewdns.infoIP, domain, email
VirusTotalhttps://www.virustotal.comIP, domain, URL, hash
VMRayhttps://www.vmray.comHash
Vulmonhttps://vulmon.comCVE
WebCheckhttps://web-check.xyzDomain
X-Force Exchangehttps://exchange.xforce.ibmcloud.comIP, domain, hash
ZoomEyehttps://www.zoomeye.aiIP

Supported Scan Engines

nameurlsupported types
Browserlinghttps://www.browserling.comURL
HybridAnalysishttps://www.hybrid-analysis.comURL
urlscan.iohttps://urlscan.ioIP, domain, URL
VirusTotalhttps://www.virustotal.comURL

How To Use

Note: Please set your API keys in the options for enabling HybridAnalysis, urlscan.io and VirusTotal scans.

Options

You can enable/disable a search engine on the options page based on your preference.

"options.png

[!NOTE] Basic preferences are stored in storage.sync. Thus they will be synced across devices. But API keys are stored in storage.local. You have to set API keys per device.

Permissions

[!NOTE] I don't and will never collect any information from the users. You can verify it by reviewing the source code.

Firefox

Please allow "Access your data for all websites" permission. Otherwise this extension does not work.

Screenshot 2023-07-15 at 8 27 26

Privacy Policy

Common Questions

  • Q. The context menu is not displayed.
    • A. Sometimes it takes a while for the context menus to appear. Or something goes wrong while refreshing the context menus. This glitch can be solved by waiting for a second. Please take a breath after selecting and then right-click.

Alternatives or Similar Tools

How It Works

flowchart LR
  CS[Content Script] --> |1 - Send Selection| BSW[Background Service Worker]
  BSW --> |2 - Create Context Menus| CS
  CS --> |3 - Click Context Menu| BSW
  BSW --> |4 - Search/Scan| T[New Tab]

Contribute

Read the contribution guide and join the contributors.