From ad4a5dd4eb4a1992733b58e23dd836804803c82f Mon Sep 17 00:00:00 2001 From: Ray <33967580+asluppiter@users.noreply.github.com> Date: Mon, 23 Jan 2023 16:25:05 -0600 Subject: [PATCH] v.0.2 --- README.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index dfe4f19..8e93336 100644 --- a/README.md +++ b/README.md @@ -11,17 +11,23 @@ python3 main.py #1 Test connection with known bad IPs. #2 Test connection with known bad URLs. #3 Test TOR Exits Nodes. +#4 Test access to live Malware distribution Urls #0 Exit. Choice: ``` -The script will dowload samples from OpenDBL ([EmergingThearts](http://opendbl.net/lists/etknown.list) and [Cisco Talos](http://opendbl.net/lists/talos.list)), Security.gives ([Mirai](https://mirai.security.gives/data/ip_list.txt)), [OpenPhish](https://openphish.com/feed.txt) and [SecOps-Institue Github (TOR Exit Nodes)](https://raw.githubusercontent.com/SecOps-Institute/Tor-IP-Addresses/master/tor-exit-nodes.lst) and test connection to random samples. +The script will dowload samples from OpenDBL ([EmergingThearts](http://opendbl.net/lists/etknown.list) and [Cisco Talos](http://opendbl.net/lists/talos.list)), Security.gives ([Mirai](https://mirai.security.gives/data/ip_list.txt)), [OpenPhish](https://openphish.com/feed.txt), [URLHouse](https://urlhaus.abuse.ch/browse/) and [SecOps-Institue Github (TOR Exit Nodes)](https://raw.githubusercontent.com/SecOps-Institute/Tor-IP-Addresses/master/tor-exit-nodes.lst) and test connection to random samples. Results are saved to different text files on the running folder with a timestamp so you can validate detection at your FW, Proxy, SIEM, etc. This script is Work-In-Progress, bugs and exceptions may appear, and new features may be added on the future. + To Do: -.-Test download of samples from MalwareBazaar + +.-~~Test download of malware samples from MalwareBazaar/URLHouse~~ - Done v0.2 + .-Test ssh scanning + .-Test crypto mining domains + .-Test IDS with dummy requests