search

gwen001 / offsectools_www

A vast collection of security tools and resources curated by the community.
https://offsec.tools
181 stars 20 forks source link

[addtool] maltrail #1891

Closed gwen001 closed 3 months ago

gwen001 commented 3 months ago

[tags]defense,ids,malware,network[/tags] [short_descr]Malicious traffic detection system.[/short_descr] [link] https://github.com/stamparm/maltrail [/link] [long_descr] Maltrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where trail can be anything from domain name (e.g. zvpprsensinaix.com for Banjori malware), URL (e.g. hXXp://109.162.38.120/harsh02.exe for known malicious executable), IP address (e.g. 185.130.5.231 for known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in discovery of unknown threats (e.g. new malware). [/long_descr] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/209b0dce9cd272d852cd83b42eb3d596.png [/image] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/2119170531c4d976e7567630952f828d.png [/image]

gwen001 commented 3 months ago

Issue correctly handled, tool is waiting for human validation.

gwen001 commented 3 months ago

Tool has been accepted by the team: https://offsec.tools/tool/maltrail

Thank you for your contribution!