100 points coding-maniac 2 hours ago 11 comments

Hi HN! Im Katriel, and im a Security Researcher/Enthusiast and in the wave of AI, i wanted to build that next gen of security tooling that surpasses the current tools, and even the paid industries with an open source engine. I built MailAccess as well, which is going to be the best damn email osint tool out there, in another year. But just before building MailAccess i built VoidAccess, because i was delving a lot into DarkINT and the content inside the dark web is too difficult to navigate through for a human, so i automated that pipeline, made sure the noise was removed, and anything NSFW was filtered out, to give the analyst an overview of what is present in the dark web, without having to actually go through it manually.

Very simple to run, you just run a few commands to install, and a couple to investigate. Then the engine takes over, and stops onyl when the job is done(or at a particular time limit, if set by the user).

Do check it out, if that is something that interests you.

Thanks to the community for giving it the love it has got till now.

sandworm101 1 hour ago | parent

Um, this is an AI tool seemingly written by AI and announced by an AI announcement? Tossing in a few typos does not convince anyone anymore.

coding-maniac 1 hour ago | parent

Good for you man. Hating on something that is developed by AI is just peak quality of a person who cant do either on their own. And do you for real think, that i cant write a couple of words to get some attention to this tool, be realistic man, and come out of the bubble that you are living inside of

deluxe20 1 hour ago | parent

Agreed, these people are very common now. And would just hate on anything that is built by AI. Atleast it makes them happy.

sandworm101 1 hour ago | parent

No, but given the darkweb context I am not going to trust vibe-coded material announced using the a speaker/voice seemingly designed to lure. There is dark stuff in the dark web, stuff the mere observation of which can have life-changing legal consequences. AI just is not reliable enough to play safely in that pool.

And btw, if you are looking for "DarkInt" (my new word of the day!) you cannot remove the NSFW material. That material often is the int, or is so intrinsically linked to it that removing one risk throwing out the baby with the bathwater.

coding-maniac 41 minutes ago | parent

there needs to be a difference between vibe-coded and developed using AI. When building complex systems, you would be aware that building the systems and then coding it takes a lot of time, so im not architecting it using AI, im architecting it myself, but developing it using AI, there has to be a clear difference between both of them.

Im with you on the fact that on the dark web there is dark stuff, but that dark stuff comes in through images, urls or some sort of media right? What if all media itself is blocked, thats exactly what ive done, and then whatever comes through text will still needs filtering, that gets handled in multiple levels, it goes through a clear wordlist, which kindof filters it out, and then a classifier and then, if AI is enabled, the AI handles anything that might be left off, but never comes to that.

Also AI is not needed to run this tool, it just helps out in making decisions, the engine itself does its job carefully, that even without AI it gives very close results, but the only thing it kindof stutters on is when there are pivots, and thats currently beign worked on.

On the part of that NSFW material itself being the intel needed, agreed but to some extinct, 90% of what the ethical analysts are trying to find is something realted to their own domain being sold, or database pertaining to them, so for that case this does a pretty good job and for that 10% there is not automation and the analysts are trained enough to know what to exactly. im not trying to replace the actual analysts but to accelerate their job basically.

Hopefully you understand that AI is just an addition and the engine itself works well without any AI whatsoever, but yeah on the part of NSFW filtering, i would stand with it, that this tool is capable of filtering anything that gets thrown at it, mainly because 80-90% nsfw stuff is media, which is already blocked.

girishkvs 1 hour ago | parent

Any interesting security reports you can share?

coding-maniac 39 minutes ago | parent

This is the only thing which i kindof went deep into while investigating ransomwares, hopefully it sheds some light

https://medium.com/the-first-digit/i-investigated-the-dark-w...

varman11 56 minutes ago | parent

I checked the repo. it seems pretty interesting ngl.

coding-maniac 39 minutes ago | parent

Thanks man!

ngl you are pretty cool

CreepyHunterX 8 minutes ago | parent

What are you merging on - a shared PGP key or a crypto address or every hit it's own node? And what happens if different people happen to use the same nickname?