{
  "event": "scanner.results_found",
  "scanner": {
    "uid": "550e8400-e29b-41d4-a716-446655440000",
    "name": "My Company Monitor",
    "type": "stealer",
    "query_config": {
      "domain[]": ["example.com"]
    }
  },
  "run": {
    "uid": "660e8400-e29b-41d4-a716-446655440001",
    "search_from": "2024-01-15T00:00:00Z",
    "search_to": "2024-01-15T01:00:00Z"
  },
  "results": {
    "count": 5,
    "sample": [
      {
        "domain": ["example.com"],
        "subdomain": ["login.example.com"],
        "url": "https://login.example.com/auth",
        "username": "[email protected]",
        "password": "password123",
        "indexed_at": "2024-01-15T00:45:00Z"
      }
    ]
  },
  "search_url": "https://oathnet.com/?mode=manual&type=stealer&filter=...",
  "timestamp": "2024-01-15T01:00:00Z"
}

curl "https://oathnet.org/api/service/v2/stealer/search?\
q=example.com&\
domain[]=example.com&\
from=2024-01-15T00:00:00Z&\
date_field=indexed_at" \
  -H "x-api-key: YOUR_API_KEY"

const express = require('express');
const app = express();
app.use(express.json());

app.post('/oathnet-webhook', (req, res) => {
  const { event, scanner, results } = req.body;

  if (event === 'scanner.test') {
    console.log('Test notification received');
    return res.status(200).json({ received: true });
  }

  if (event === 'scanner.results_found') {
    console.log(`Scanner "${scanner.name}" found ${results.count} results`);
    // Process results, alert security team, etc.
  }

  res.status(200).json({ received: true });
});

app.listen(3000);

from flask import Flask, request, jsonify

app = Flask(__name__)

@app.route('/oathnet-webhook', methods=['POST'])
def handle_webhook():
    data = request.json
    event = data.get('event')

    if event == 'scanner.test':
        print('Test notification received')
    elif event == 'scanner.results_found':
        print(f'Found {data["results"]["count"]} results')
        # Process results, alert security team, etc.

    return jsonify({'received': True})