# postmaniac
# Description
Postman OSINT tool to **extract creds, token, username, email & more from Postman Public Workspaces**.
It is designed to perform OSINT recognition on a target for pentesting, bugbounty and more, in order to get the maximum information from the requests left by developers on the Postman public workspaces.
Bonus:
- No need to be authenticated
- No API blocking / No rate-limit
# Requirements
[Python 3](https://www.python.org/download/releases/3.0/)
# Installation
### With PyPI
`pip3 install postmaniac`
### With Github
```bash
# clone the repo
$ git clone https://github.com/boringthegod/postmaniac.git
# change the working directory to postmaniac
$ cd postmaniac
# install postmaniac
$ python3 setup.py install
```
### With Docker
You can pull the Docker image with:
```bash
docker pull ghcr.io/boringthegod/postmaniac:latest
```
And then launch the tool **by not forgetting to specify your volume** to be able to read the file scan.txt written in output
`docker run -v scan:/output ghcr.io/boringthegod/postmaniac query`
# Usage
postmaniac can be run from the CLI and rapidly embedded within existing python applications.
```bash
usage: postmaniac [-h] query
Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces
positional arguments:
query name of the target (example: tesla)
options:
-h, --help show this help message and exit
```
All the interesting information (whether in the environment values of the Postman Workspace, or in authentication values, in the headers or directly in the body of each request) is retrieved and **written in the scan.txt file**
## Demo
# Details
## Disclaimer
This tool is for educational purposes only, I am not responsible for its use.
## License
[GNU General Public License v3.0](https://www.gnu.org/licenses/gpl-3.0.fr.html)
Raw data
{
"_id": null,
"home_page": "",
"name": "postmaniac",
"maintainer": "",
"docs_url": null,
"requires_python": ">=3.0",
"maintainer_email": "",
"keywords": "cybersecurity,investigation,lespireshat,osint,pentest,postman",
"author": "",
"author_email": "Pierre Ceberio <boringthegod@tutanota.com>",
"download_url": "https://files.pythonhosted.org/packages/1c/f7/cc9bd510d259463f750e3bd0b890974844268329bed79fb3f9d368593e9f/postmaniac-0.9.2.tar.gz",
"platform": null,
"description": "# postmaniac\n\n\n\n# Description\n\nPostman OSINT tool to **extract creds, token, username, email & more from Postman Public Workspaces**.\n\nIt is designed to perform OSINT recognition on a target for pentesting, bugbounty and more, in order to get the maximum information from the requests left by developers on the Postman public workspaces.\n\nBonus:\n\n- No need to be authenticated\n\n- No API blocking / No rate-limit\n\n# Requirements\n\n[Python 3](https://www.python.org/download/releases/3.0/)\n\n# Installation\n\n### With PyPI\n\n`pip3 install postmaniac`\n\n### With Github\n\n```bash\n# clone the repo\n$ git clone https://github.com/boringthegod/postmaniac.git\n\n# change the working directory to postmaniac\n$ cd postmaniac\n\n# install postmaniac\n$ python3 setup.py install\n```\n\n### With Docker\n\nYou can pull the Docker image with:\n\n```bash\ndocker pull ghcr.io/boringthegod/postmaniac:latest\n```\n\nAnd then launch the tool **by not forgetting to specify your volume** to be able to read the file scan.txt written in output\n\n`docker run -v scan:/output ghcr.io/boringthegod/postmaniac query`\n\n# Usage\n\npostmaniac can be run from the CLI and rapidly embedded within existing python applications.\n\n```bash\nusage: postmaniac [-h] query\n\nPostman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces\n\npositional arguments:\n query name of the target (example: tesla)\n\noptions:\n -h, --help show this help message and exit\n```\n\nAll the interesting information (whether in the environment values of the Postman Workspace, or in authentication values, in the headers or directly in the body of each request) is retrieved and **written in the scan.txt file**\n\n## Demo\n\n\n\n# Details\n\n## Disclaimer\n\nThis tool is for educational purposes only, I am not responsible for its use.\n\n## License\n\n[GNU General Public License v3.0](https://www.gnu.org/licenses/gpl-3.0.fr.html)\n",
"bugtrack_url": null,
"license": "",
"summary": "Postman OSINT tool to extract creds, token, username, email & more from Postman Public Workspaces.",
"version": "0.9.2",
"project_urls": {
"Bug Tracker": "https://github.com/boringthegod/postmaniac/issues",
"Homepage": "https://github.com/boringthegod/postmaniac"
},
"split_keywords": [
"cybersecurity",
"investigation",
"lespireshat",
"osint",
"pentest",
"postman"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "b75051c489c17c13753bf9c5387b48de25dbac03e9fb47c13bb0c69da54b6b79",
"md5": "7dd6afc4beddc2838132505ab6c640f3",
"sha256": "5b92e16b415cbf464bab241f8b379ab4a851a94501cdc1719d45b03ad556a3dd"
},
"downloads": -1,
"filename": "postmaniac-0.9.2-py3-none-any.whl",
"has_sig": false,
"md5_digest": "7dd6afc4beddc2838132505ab6c640f3",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.0",
"size": 18664,
"upload_time": "2023-05-16T09:22:35",
"upload_time_iso_8601": "2023-05-16T09:22:35.737594Z",
"url": "https://files.pythonhosted.org/packages/b7/50/51c489c17c13753bf9c5387b48de25dbac03e9fb47c13bb0c69da54b6b79/postmaniac-0.9.2-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "1cf7cc9bd510d259463f750e3bd0b890974844268329bed79fb3f9d368593e9f",
"md5": "f6db6af7a8c98de88430b3a712b25766",
"sha256": "c6d4651440aa302393a0db4c03a386067be38c5683636fbcac8fc2207c2da38e"
},
"downloads": -1,
"filename": "postmaniac-0.9.2.tar.gz",
"has_sig": false,
"md5_digest": "f6db6af7a8c98de88430b3a712b25766",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.0",
"size": 225716,
"upload_time": "2023-05-16T09:22:37",
"upload_time_iso_8601": "2023-05-16T09:22:37.303936Z",
"url": "https://files.pythonhosted.org/packages/1c/f7/cc9bd510d259463f750e3bd0b890974844268329bed79fb3f9d368593e9f/postmaniac-0.9.2.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2023-05-16 09:22:37",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "boringthegod",
"github_project": "postmaniac",
"travis_ci": false,
"coveralls": false,
"github_actions": true,
"requirements": [
{
"name": "colorama",
"specs": [
[
"==",
"0.4.6"
]
]
},
{
"name": "requests",
"specs": [
[
"==",
"2.30.0"
]
]
}
],
"lcname": "postmaniac"
}
JSON
