Skip to content

Commit

Permalink
v.0.2
Browse files Browse the repository at this point in the history
  • Loading branch information
asluppiter authored Jan 23, 2023
1 parent 9ce4f74 commit ad4a5dd
Showing 1 changed file with 8 additions and 2 deletions.
10 changes: 8 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,17 +11,23 @@ python3 main.py
#1 Test connection with known bad IPs.
#2 Test connection with known bad URLs.
#3 Test TOR Exits Nodes.
#4 Test access to live Malware distribution Urls
#0 Exit.
Choice:
```

The script will dowload samples from OpenDBL ([EmergingThearts](http://opendbl.net/lists/etknown.list) and [Cisco Talos](http://opendbl.net/lists/talos.list)), Security.gives ([Mirai](https://mirai.security.gives/data/ip_list.txt)), [OpenPhish](https://openphish.com/feed.txt) and [SecOps-Institue Github (TOR Exit Nodes)](https://raw.githubusercontent.com/SecOps-Institute/Tor-IP-Addresses/master/tor-exit-nodes.lst) and test connection to random samples.
The script will dowload samples from OpenDBL ([EmergingThearts](http://opendbl.net/lists/etknown.list) and [Cisco Talos](http://opendbl.net/lists/talos.list)), Security.gives ([Mirai](https://mirai.security.gives/data/ip_list.txt)), [OpenPhish](https://openphish.com/feed.txt), [URLHouse](https://urlhaus.abuse.ch/browse/) and [SecOps-Institue Github (TOR Exit Nodes)](https://raw.githubusercontent.com/SecOps-Institute/Tor-IP-Addresses/master/tor-exit-nodes.lst) and test connection to random samples.

Results are saved to different text files on the running folder with a timestamp so you can validate detection at your FW, Proxy, SIEM, etc.

This script is Work-In-Progress, bugs and exceptions may appear, and new features may be added on the future.

To Do:
.-Test download of samples from MalwareBazaar

.-~~Test download of malware samples from MalwareBazaar/URLHouse~~ - Done v0.2

.-Test ssh scanning

.-Test crypto mining domains

.-Test IDS with dummy requests

0 comments on commit ad4a5dd

Please sign in to comment.