This directory contains a lightweight Python server that mimics the ransomware.live API.
It is designed for demos, webinars, and testing where you need:
- Predictable Data: Ensures the output report always looks exactly like the "Golden Sample".
- Offline Capability: Run the workflow without internet access.
- Safety: Zero chance of pulling in offensive/graphic content from live leak sites during a presentation.
No dependencies required. Uses standard Python libraries.
python mock_api/server.pyThe server will start on port 3000.
GET http://localhost:3000/v2/recentvictims- Returns 24 victims (LockBit 3.0, Play, BlackBasta) matched to the sample report.
GET http://localhost:3000/v2/groups/{group_name}- Returns static profiles for
lockbit3,play, andblackbasta.
- Returns static profiles for
To use this mock server in your n8n workflow:
- Open the Fetch Recent Victims node.
- Change URL from
https://api.ransomware.live/v2/recentvictimstohttp://localhost:3000/v2/recentvictims. - Open the Get Group Profile node.
- Change URL from
https://api.ransomware.live/v2/groups/{{ $json.group }}tohttp://localhost:3000/v2/groups/{{ $json.group }}.