Cyber Bot is an Node.js project that helps users enhance their cybersecurity skills through automated Telegram messages. The bot runs on a VPS (OVH) and leverages Mistral AI to generate cybersecurity-related content.

• 📱 Telegram: @bot_cyber_fr
• 🦋 Bluesky: @calebpr.bsky.social
• 🌐 Website: www.cyberhub.blog
• 📚 Documentation: koadt.github.io/cyber-bot

npm run cron -- -c sendTHM

npm run cron -- -c sendTHMCTF

Sends curated notes from a GitHub repository, enhanced by Mistral AI

npm run cron -- -c sendGithubNotes

Aggregates and summarizes news from our curated RSS feed

npm run cron -- -c sendNewsResume

Fetches and analyzes the latest CVE (Common Vulnerabilities and Exposures) entries

npm run cron -- -c sendCve

Using https://nvd.nist.gov/developers/vulnerabilities

Provides summaries of the latest Darknet Diaries podcast episodes

npm run cron -- -c sendDarknetDiariesResume

Provides summaries of the latest Snyk podcast episodes

npm run cron -- -c sendSnykResume

Provides summaries of the latest Security Now podcast episodes

npm run cron -- -c sendSecurityNowResume

Provides summaries of the latest The Cyber Show podcast episodes

npm run cron -- -c sendCyberShowResume

Fetches and summarizes posts from specified cybersecurity subreddit

npm run cron -- -c sendRedditPost

Summarizes the latest videos from specified channels

npm run cron -- -c sendYoutubeResume -y https://www.youtube.com/[channel-name]

Shares relevant short-form videos based on customizable parameters (search period, queries, and blacklisted terms). Configure settings in the sendShort.js script.

npm run cron -- -c sendShort

• 📦 Node.js
• 🤖 Telegram Bot Token (BotFather)
• 🧠 Mistral AI API Key (Register)
• 💻 VPS (recommended)

1. Clone and Initialize

git clone git@github.com:kOaDT/cyber-bot.git
cd cyber-bot

# Create tracking files
mkdir -p assets
touch assets/processedNotes.json       # GithubNotes tracking
touch assets/processedArticles.json    # News tracking
touch assets/processedShorts.json      # Shorts tracking
touch assets/processedDD.json          # Darknet Diaries Podcast tracking
touch assets/processedSnyk.json        # Snyk Podcast tracking
touch assets/processedYt.json          # YouTube tracking
touch assets/processedReddit.json      # Reddit post tracking
touch assets/processedCTF.json         # CTF tracking
touch assets/processedSecurityNow.json # Security Now Podcast tracking
touch assets/processedCyberShow.json   # The Cyber Show Podcast tracking

2. Install Dependencies

npm install

3. Configure Environment Create a .env file with the following variables:

# GitHub Settings
GITHUB_SECRET=
GITHUB_USERNAME=
GITHUB_REPO=
# Optional
EXCLUDED_GITHUB_FILES=

# Telegram Settings
TELEGRAM_BOT_TOKEN=
CHAT_ID=
# Optional Topic IDs for message organization
TELEGRAM_TOPIC_THM=
TELEGRAM_TOPIC_NEWS=
TELEGRAM_TOPIC_YOUTUBE=
TELEGRAM_TOPIC_PODCAST=
TELEGRAM_TOPIC_GITHUB=
TELEGRAM_TOPIC_REDDIT=
TELEGRAM_TOPIC_CVE=

# Mistral AI Settings
MISTRAL_API_KEY=
# Optional, comma-separated
AUTHORIZED_LANGUAGES=

# AssemblyAI - Text-to-Speech
ASSEMBLYAI_API_KEY=

# YouTube Settings
YOUTUBE_API_KEY=

# Reddit
REDDIT_SUBREDDITS=
REDDIT_DAYS_LOOKBACK=
REDDIT_CLIENT_ID=
REDDIT_CLIENT_SECRET=

# CVE
CVSS_SEVERITY_THRESHOLD=   # Default >= 7.0
HOURS_DELAY=               # Default 24 hours
TECHNOLOGIES_OF_INTEREST=

# Optional Database Settings
MYSQL_HOST=
MYSQL_USER=
MYSQL_PASSWORD=
MYSQL_DATABASE=
I_WANT_TO_SAVE_MESSAGES_IN_DB=true # Enable message logging in database

📝 Note: This project is designed to work without a database by default. However, you can enable message logging in a MySQL database by setting I_WANT_TO_SAVE_MESSAGES_IN_DB=true and configuring the database connection variables defined in /config/dbConfig.js. The database should contain a TelegramLogs table with at least two columns: message and dateAdd. This feature uses the mysql2 package.

4. Optional: Customize Mistral AI parameters

/crons/config/mistral.js

5. Optional: Modify bot prompts

/crons/utils/prompts

npm run cron -- -c <CRON_NAME>

npm run cron -- -c <CRON_NAME> -l <language>

📝 Note: Content language is restricted by the AUTHORIZED_LANGUAGES environment variable to avoid prompt injection. Default is English.

For VPS deployment guidance, you can also check our deployment guide.

We welcome contributions! Feel free to:

• 🐛 Report issues
• 🔀 Submit pull requests
• 💡 Suggest new features

This project is licensed under the Creative Commons Attribution-NonCommercial 4.0 International License (CC BY-NC 4.0).

This means you are free to share and adapt this work for non-commercial purposes, as long as you provide appropriate attribution. More information: LICENSE