l9filter is a translation tool for stdin/stdout that understand the l9format. Its main goal is to facilitate data communication between different network recon software.
- stdin/stdout oriented
- Conversion back and forward between formats
- Low memory/CPU footprint
- Easy to implement interface
l9filter transform -h
Displays help for the random command (only implementation atm)
| Flag | Description |
|---|---|
| --input-format | Selects the input format to parse |
| --output-format | Selects the output format to use |
| --source-file | Use an input file instead of stdin |
| --target-file | Use an output file instead of stdout |
The following formats are supported
| Format | Description |
|---|---|
| l9 | JSON based l9format |
| nmap | Nmap format |
| masscan | masscan default format |
| hostport | <host>:<port> conversion |
| url | Handles URL conversion |
| human | Human readable format (output only) |
| dnsx | Handles DNS resolution from dnsx's json output |
| sx | Handles SX's JSON input/output sx |
| tbicore | Handles LeakIX API's schema |
The installation is easy. You can download the pre-built binaries for your platform from the Releases page.
▶ chmod +x l9filter-linux-64
▶ mv l9filter-linux-64 /usr/local/bin/l9filter▶ GO111MODULE=on go get -u -v github.com/LeakIX/l9filter/cmd/l9filter
▶ ${GOPATH}/bin/l9filter transform -hl9filter requires an input to run. By default stdin will be used unles input-file is specified.
▶ l9filter transform -i l9 -o hostportip4scout speaks l9format which is a JSON schema targeted at network recon.
Parsing its output would look like :
▶ ip4scout random --ports=3306,9200,6379|tee results.json|l9filter transform -i l9 -o humanDisplays human-readable results on stdout while saving the scan results to results.json
▶ masscan -rate=10000 -p1-1024 192.168.0.0/24|l9filter transform -i masscan -o l9|l9tcpid service --max-threads=100 > services.json Run masscan, transform its output to l9format, send live results to l9tcpid and save the final
work to services.json.
l9filter transform -s services.json -i l9 -o human Reads l9formatted lines from services.json and outputs human-readable format to stdout