# This is an example ThreatIngestor config file with some preconfigured RSS
# sources, feeding extracted artifacts into a CSV file.

general:
    # Run forever, check feeds once an hour.
    daemon: True
    sleep: 10
    onion_validation: ([a-z2-7]{16,56}\.onion)
    blacklist: pedo,xxx,infant,loli,porn,child,abuse,sex,drug,cocaine,dope,zoo,daddy,daughter,boy,girl,young,muder,cocks,year,old
    interestingKeywords: t.me,rss,xml,atom,dataleak,breach,blog,ransomware,source code,data breach,bank,logs,hack
    elasticsearch:
            index: darkweb
            port : 9200
            host : 127.0.0.1

sources:
    # A few threat intel blogs to get you started!
    - name: simple-text-file
      module: simplefile
      filename: onion_master_list.txt

    #  - name: source-gist
    #    module: gist
    #    url: https://gist.github.com/search?l=Text&q=.onion

    #  - name: source-reddit
    #    module: reddit
    #    url: https://api.pushshift.io/reddit/search/comment/?subreddit=onions&limit=1000000
    #    feed_type: messy
    #
    #  - name: pastebin
    #    module: pastebin-account
    #    url: https://gist.github.com/search?l=Text&q=.onion
    #    feed_type: messy
    #
    #  - name: hunchly-report
    #    module: gmail-hunchly
    #    url: https://gist.github.com/search?l=Text&q=.onion
    #    feed_type: messy
    #
    #  - name: onionland-search
    #    module: collect-onions
    #    url: http://3bbaaaccczcbdddz.onion/discover
    #    feed_type: messy
    #
    #  - name: torch
    #    module: collect-onions
    #    url: http://xmh57jrzrnw6insl.onion
    #    feed_type: messy


operators:
        - name: simple-html
          module: html
          socks5:
                  http: 'socks5h://127.0.0.1:9050'
                  https: 'socks5h://127.0.0.1:9050'
          TorController:
                  port: 9051
                  password: your-torcontroller-password-here

        - name: simple-screenshot
          module: screenshot
          screenshots_path: null

        - name: onionscan-go
          module: onionscan
          binpath: /home/tony/go/bin/onionscan


    #  - name: yara-rule
    #    module: yara
    #    filename: categories.yar
    #    base_score: 50
    #
    #  - name: regex-match
    #    module: regex
    #    keywords: test,test2
    #    base_score: 20

notifiers:
    # Simple telegram notifier
  - name: telegram-notifer
    module: telegram
    chat_id:
    token:
