Bot not recognizing threats

Bonsailinse commented 9 months ago

Hey.

I just tested this bot but it doesn't seem to recognize any threats. I posted a few links directly from Phishing.Database's lists (old ones, new ones, doesn't matter), the bot marked all of them with the green checkmark. The log also says that the links are fine.

I uploaded and posted a known "hacker tool" which gets blocked by literally every virus scanner in existence but it didn't even get checked. It's about 120mb big, maybe that's a problem? It still should get checked somehow.

I want to give this bot a chance because I see big potential in it but I cannot find any test triggering a threat detection. 02-18_23-31-24

Qolors commented 9 months ago

Hang in there for the next update as a lot of this will be addressed.

URL handling will be beefed up (currently only pulls Phishing Database's domain list)
File endpoint URLs aren't handled properly currently
Files over 20mb won't be checked. Updated version will allow you to configure the size up to 4gb (ClamAV's max)

Bonsailinse commented 9 months ago

Sounds good. The URLs I tested were all present in the domain list though, so you might want to check that. Looking forward to the updated version, keep up the good work.

Qolors / Clam-Shell

Bot not recognizing threats #1