mandiant / flare-fakenet-ng

FakeNet-NG - Next Generation Dynamic Network Analysis Tool
Apache License 2.0
1.78k stars 358 forks source link

Manage http response followed by the host header #189

Closed futex closed 3 months ago

futex commented 3 months ago

Hello,

Is it possible that fakeNet send a different response following the HOST: header parameter. Ex: if the malware send a request ip-api.com/json, fakenet send the right response that the malware expected, if it's another website, a different reponse must be send.

That can help for a good malware execution inside a sandbox.