BotPEASS

Use this bot to monitor new CVEs containing defined keywords and send alerts to Slack and/or Telegram.

See it in action

Join the telegram group peass to see the bot in action and be up to date with the latest privilege escalation vulnerabilities.

Configure one for yourself

Configuring your own BotPEASS that notifies you about the new CVEs containing specific keywords is very easy!

• Fork this repo

• Modify the file config/botpeas.yaml and set your own keywords

• In the github secrets of your forked repo enter the following API keys:

  • VULNERS_API_KEY: (Optional) This is used to find publicly available exploits. You can use a Free API Key.
  • SLACK_WEBHOOK: (Optional) Set the slack webhook to send messages to your slack group
  • DISCORD_WEBHOOK_URL: (Optional) Set the discord webhook to send messages to your discord channel
  • TELEGRAM_BOT_TOKEN and TELEGRAM_CHAT_ID: (Optional) Your Telegram bot token and the chat_id to send the messages to
  • PUSHOVER_DEVICE_NAME PUSHOVER_USER_KEY PUSHOVER_TOKEN: (Optional) Set your key and token to receive pushover notifications.
  • NTFY_URL: (Optional) Set the URL to send the notifications to ntfy server.
  • NTFY_TOPIC: (Optional) Set the topic to send the notifications to ntfy server.
  • NTFY_AUTH: (Optional) Set the auth token for the ntfy server.

• Check .github/wordflows/botpeas.yaml and configure the cron (once every 8 hours by default)

Note that the slack, telegram, discord and ntfy.sh configurations are optional, but if you don't set any of them you won't receive any notifications anywhere