Giter VIP home page Giter VIP logo

turbot / steampipe-plugin-hibp Goto Github PK

View Code? Open in Web Editor NEW
6.0 9.0 1.0 1.32 MB

Use SQL to instantly query breaches, passwords, pastes and more from HIBP. Open source CLI. No DB required.

Home Page: https://hub.steampipe.io/plugins/turbot/hibp

License: Apache License 2.0

Makefile 0.72% PLSQL 2.27% Go 97.01%
haveibeenpwned hibp postgresql postgresql-fdw sql steampipe steampipe-plugin hacktoberfest backup etl

steampipe-plugin-hibp's Introduction

image

Have I Been Pwned Plugin for Steampipe

Use SQL to query breaches, account breaches, pastes and passwords from Have I Been Pwned.

Quick start

Install the plugin with Steampipe:

steampipe plugin install hibp

Run a query:

select
  name,
  pwn_count as compromised_count,
  is_verified as verified,
  breach_date
from
  hibp_breach
where
  breach_date > '2022-01-01'

Engines

This plugin is available for the following engines:

Engine Description
Steampipe The Steampipe CLI exposes APIs and services as a high-performance relational database, giving you the ability to write SQL-based queries to explore dynamic data. Mods extend Steampipe's capabilities with dashboards, reports, and controls built with simple HCL. The Steampipe CLI is a turnkey solution that includes its own Postgres database, plugin management, and mod support.
Postgres FDW Steampipe Postgres FDWs are native Postgres Foreign Data Wrappers that translate APIs to foreign tables. Unlike Steampipe CLI, which ships with its own Postgres server instance, the Steampipe Postgres FDWs can be installed in any supported Postgres database version.
SQLite Extension Steampipe SQLite Extensions provide SQLite virtual tables that translate your queries into API calls, transparently fetching information from your API or service as you request it.
Export Steampipe Plugin Exporters provide a flexible mechanism for exporting information from cloud services and APIs. Each exporter is a stand-alone binary that allows you to extract data using Steampipe plugins without a database.
Turbot Pipes Turbot Pipes is the only intelligence, automation & security platform built specifically for DevOps. Pipes provide hosted Steampipe database instances, shared dashboards, snapshots, and more.

Developing

Prerequisites:

Clone:

git clone https://github.com/turbot/steampipe-plugin-hibp.git
cd steampipe-plugin-hibp

Build, which automatically installs the new version to your ~/.steampipe/plugins directory:

make

Configure the plugin:

cp config/* ~/.steampipe/config
vi ~/.steampipe/config/hibp.spc

Try it!

steampipe query
> .inspect hibp

Further reading:

Credits

  • This plugin was based on the wedtm/steampipe-plugin-hibp project. The client and table designs in that project served as the base for this plugin, thanks to @wedtm for his amazing work!

Open Source & Contributing

This repository is published under the Apache 2.0 (source code) and CC BY-NC-ND (docs) licenses. Please see our code of conduct. We look forward to collaborating with you!

Steampipe is a product produced from this open source software, exclusively by Turbot HQ, Inc. It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our Open Source FAQ.

Get Involved

Join #steampipe on Slack →

Want to help but don't know where to start? Pick up one of the help wanted issues:

steampipe-plugin-hibp's People

Contributors

binaek avatar cbruno10 avatar dependabot[bot] avatar madhushreeray30 avatar misraved avatar wneessen avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Forkers

wneessen

steampipe-plugin-hibp's Issues

Pwned passwords API doesn't need a key

Describe the bug
The HIBP pwned passwords API does not require an API key but the HIBP plugin still requires one.

> select hash, count from hibp_password where plaintext = 'love';
Error: api key must be configured (SQLSTATE HV000)

Steampipe version (steampipe -v)
steampipe version 0.16.4

Plugin version (steampipe plugin list)
hub.steampipe.io/plugins/turbot/shodan@latest v0.4.0

To reproduce
Steps to reproduce the behavior (please include relevant code and/or commands).
This simple query select hash, count from hibp_password where plaintext = 'love'; should be able to execute just fine. To validate, you can follow this gist here to query the API from the command line without needing an API key.

Expected behavior
I expected a response to be returned. :)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.