Update README.md

asluppiter · Mar 16, 2023 · 35840db · 35840db
1 parent 0122275
commit 35840db
Showing 1 changed file with 14 additions and 3 deletions.
diff --git a/README.md b/README.md
@@ -13,11 +13,14 @@ python3 main.py
 #3 Test TOR Exits Nodes.
 #4 Test access to live Malware distribution Urls
 #5 Test connection to known Cryptomining domains
+#6 Test connection to Domain-Generated-Algorithm Domains.
+#7 Test connection to Remote Desktop Management.(Anydesk,etc.)
+#8 Test connection using known bad user agents.
 #0 Exit.
 Choice:
 ```
 
-The script will dowload samples from OpenDBL ([EmergingThearts](http://opendbl.net/lists/etknown.list) and [Cisco Talos](http://opendbl.net/lists/talos.list)), Security.gives ([Mirai](https://mirai.security.gives/data/ip_list.txt)), [OpenPhish](https://openphish.com/feed.txt), [URLHouse](https://urlhaus.abuse.ch/browse/) and [SecOps-Institue Github (TOR Exit Nodes)](https://raw.githubusercontent.com/SecOps-Institute/Tor-IP-Addresses/master/tor-exit-nodes.lst) and test connection to random samples.
+The script will dowload samples from OpenDBL ([EmergingThearts](http://opendbl.net/lists/etknown.list) and [Cisco Talos](http://opendbl.net/lists/talos.list)), Security.gives ([Mirai](https://mirai.security.gives/data/ip_list.txt)), [OpenPhish](https://openphish.com/feed.txt), [URLHouse](https://urlhaus.abuse.ch/browse/), Bad User-Agents ([mitchellkrogza](https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker)) and [SecOps-Institue Github (TOR Exit Nodes)](https://raw.githubusercontent.com/SecOps-Institute/Tor-IP-Addresses/master/tor-exit-nodes.lst) and test connection to random samples.
 
 Results are saved to different text files on the running folder with a timestamp so you can validate detection at your FW, Proxy, SIEM, etc.
 
@@ -27,8 +30,16 @@ To Do:
 
 .-~~Test download of malware samples from MalwareBazaar/URLHouse~~ - Done v0.2
 
-.-Test ssh scanning
+.-~~Test ssh scanning~~ - Added v0.3 (as part of existing tests SSH Port 22 is tested alongside 80 and 443)
 
 .-~~Test crypto mining domains~~ Done v0.3
 
-.-Test IDS with dummy requests
+.-~~Test IDS with dummy requests~~ Shifted-> It would be too much of a hassle to do so I added new features in v0.4 to compensate
+
+Thanks:
+
+.-OpenDBL
+
+.-Abuse.ch
+
+.-Netify (Used to get URLs for the Remote Desktop sim.)