访问 .onion 站点前必须本地启动 Tor 服务；需自行准备 Telegram bot、ntfy 和 Bluesky 凭据并写入 .env；运行脚本前要先 cd bin 目录。
git clone https://github.com/JMousqueton/ransomware.live.git
cd ransomwarelive
python3 -m venv venv
source venv/bin/activate
pip install -r bin/requirements.txt
cp .env.sample .env 硬件要求按 README 说明
README 未说明具体硬件要求；需 Python 3.9+，并建议在 Linux/macOS 等 Unix 环境运行，访问 .onion 需本地运行 Tor 服务。
抓取勒索软件泄露站点并发布数据的监控工具，帮你持续追踪勒索团伙动态
追踪勒索软件团伙的情报平台，抓取并整理受害者信息、谈判记录和截图，帮安全人员快速掌握勒索攻击动态。
核心能力
- 通过 Tor 自动抓取含 .onion 的勒索泄露站点
- 解析采集数据并做结构化与富化处理
- 集成 Hudson Rock 获取信息窃取数据
- 对泄露站点帖子截图并加水印、元数据、可选人脸模糊
- 通过 ntfy 和 Bluesky 推送通知
容易踩的坑
内容由模型根据 README 生成，可能不完整或不准确，以官方文档为准。看原文 README
暂无 release 数据（可能没有发版，或尚未同步）。
用户点评
登录用户的真实使用记录，可按版本和硬件筛选共 0 条
还没有人点评。第一个说出真实体验的人最有价值。
Ransomware.live
Ransomware.live is originally a fork of ransomwatch.
It is a ransomware leak site monitoring tool that scrapes entries from various ransomware leak sites and publishes them.
🔗 GitHub repository: https://github.com/JMousqueton/ransomware.live
Ransomware.live handles data collection, parsing, enrichment, and automation to maintain the database.
📌 Features
- Automated scraping of ransomware leak sites (including
.oniondomains via Tor) - Integration with Hudson Rock for infostealer data via a Telegram bot
- Data management tools for victims and groups
- Image capture of leak site posts with watermarking, metadata, and optional face blurring
- Notifications via ntfy and Bluesky servers
- Environment-based configuration via
.env
📂 Repository Structure
ransomwarelive/
│
├── bin/ # Core Python scripts and libraries
| ├── _parser/ # All parsers
│ ├── libcapture.py # Capture victim/group screenshots
│ ├── hudsonrockapi.py # Hudson Rock API integration via Telegram bot
│ ├── parse.py # Parse collected data into structured formats
│ ├── scrape.py # Main scraping engine
│ ├── manage.py # Management CLI
│ ├── shared_utils.py # Shared helper functions
│ ├── victims-browser.py# Victim data viewer
│ ├── status.py # System health and process status
│ ├── rsslib.py # (Optional) RSS feed generation
│ └── requirements.txt # Python dependencies
│
├── images/ # Static assets & watermarks
├── db/ # Local databases (JSON)
├── tmp/ # Temporary working files
└── .env.sample # Example environment configuration
---
## ⚙️ Installation
### 1. Clone the Repository
```bash
git clone https://github.com/JMousqueton/ransomware.live.git
cd ransomwarelive
2. Create a Virtual Environment
python3 -m venv venv
source venv/bin/activate
3. Install Dependencies
pip install -r bin/requirements.txt
4. Configure Environment
Copy the example .env file and edit it with your configuration:
cp .env.sample .env
nano .env
🚀 Usage
Start Scraping
cd bin
python scrape.py
Parse Collected Data
cd bin
python parse.py
Manage Data
cd bin
python manage.py --help
🛡️ Requirements
- Python 3.9+
- Tor service running locally for
.onionaccess - Telegram bot credentials (used to query Hudson Rock for infostealer data)
- ntfy server credentials (for notifications)
- Bluesky server credentials (for notifications)
- Unix-based environment (Linux/macOS) recommended
📜 License
This project is licensed under the unlicense License**.
See the LICENSE file for details.
⚠️ Disclaimer
This project is for research and educational purposes only.
Do not use it for unauthorized access to systems or data.
The maintainers take no responsibility for misuse of the code.
This project is only the parsing and scraping, not the website.
🤝 Contributing
Contributions are welcome!
Please open an issue or submit a pull request to suggest improvements or add new features.
Maintainer: Julien Mousqueton
Website: https://ransomware.live