curben
/
phishing-filter
mirror of https://gitlab.com/malware-filter/phishing-filter
1
0
Fork 0
Code Issues Releases Wiki Activity
1,306 Commits 2 Branches 0 Tags 682 MiB
Commit Graph

113 Commits

Author SHA1 Message Date
MDLeom 2ee0b2d661
feat(source): disable mitchellkrogza/Phishing.Database 
source does not offer online-only links
closes #86
 2024-05-02 12:00:37 +00:00
MDLeom e9ae4a9f11
refactor: replace got with fetch 2024-04-07 00:45:34 +00:00
MDLeom 607208c171
fix: check file exists and not zero size 2024-03-10 07:49:19 +00:00
MDLeom a1548a5e1c
fix: may not necessarily contain ipv4 entries 2024-03-10 03:06:51 +00:00
MDLeom 00d43e98d3
fix(exclude): click.mail.onedrive.com 2024-03-09 04:28:57 +00:00
MDLeom 6f7cf84de2
chore(exclude): cleanup entries 2024-03-09 04:16:19 +00:00
MDLeom e02ed129d5
fix(exclude): fonts.gstatic.com 2024-03-09 04:12:33 +00:00
MDLeom 5c7b1f4645
feat(source): add mitchellkrogza/Phishing.Database 
ref #40
revert e68268f506
 2024-03-09 04:06:37 +00:00
Ming Di Leom 6b681bc58f Merge branch 'exclude-s3-fix' into 'main' 
Add Amazon S3 dual-stack endpoints to exclude list

See merge request malware-filter/phishing-filter!8
 2024-03-08 08:11:27 +00:00
Alan Turing ecd739a846 fix(exclude): Add Amazon S3 dual-stack endpoints to exclude list 
and add new regions
https://docs.aws.amazon.com/AmazonS3/latest/userguide/dual-stack-endpoints.html
https://docs.aws.amazon.com/general/latest/gr/s3.html
 2024-03-08 08:11:27 +00:00
MDLeom 1b2312f492
fix: "phishing-subdomains.txt" may be empty 2024-03-08 07:54:33 +00:00
MDLeom 93b85b00f9
chore: remove remaining phishunt 
no longer used since #43 #45
 2024-03-07 10:14:08 +00:00
MDLeom b3f6e90b9a
feat: remove phishtank source 
frequent interference from cloudflare captcha
 2024-03-07 10:09:32 +00:00
MDLeom 6175179162
refactor: esm 
got is esm only since v12
 2023-10-01 09:56:57 +00:00
MDLeom 07ca1adfd1
refactor: lazy load os-release 2023-05-20 11:23:07 +00:00
MDLeom 667fad0b6f
style: remove debug message 2023-05-20 11:15:29 +00:00
MDLeom 13289d3365
fix: dash does not support pipefail 2023-05-20 10:38:47 +00:00
MDLeom eac902123e
fix: check installed grep is GNU variant 2023-05-20 09:51:12 +00:00
MDLeom eebf51ac47
fix: check existent of busybox 
if dos2unix is not installed
 2023-05-20 09:44:54 +00:00
MDLeom ca23363ef4
fix: reprocess decoded safelink 
- extend 1ea3ce51f5
- also include scope of 0578e6c16a
 2023-05-20 08:20:22 +00:00
MDLeom 0578e6c16a
fix: handle URL of top domains without path 
- ref #62, #43, #44
- 745c81b134, c623542b9a, 8923941376
were not effective previously
 2023-05-19 10:34:04 +00:00
MDLeom 7dbdc85163
fix: sed syntax to recognise newline 
https://gitlab.com/malware-filter/urlhaus-filter/-/issues/79
 2023-04-29 04:11:14 +00:00
MDLeom 745c81b134
fix(exclude): education.gouv.fr 
- close #62
- checked whois record
 2023-04-25 11:24:54 +00:00
MDLeom 4456662716
fix(exclude): *.digitaloceanspaces.com 
- close #61
- close #52
- https://docs.digitalocean.com/products/spaces/details/availability/
 2023-04-25 11:17:05 +00:00
MDLeom 953537642e
fix(exclude): *.safelinks.protection.outlook.com 
- close #58
- enumerated dnsdumpster.com
- related 1ea3ce51f5
 2023-04-25 11:07:03 +00:00
MDLeom 6e68b44c73
fix(exclude): smex-ctp.trendmicro.com 
- closes #59
 2023-04-25 10:51:58 +00:00
MDLeom 99536fa229
fix(exclude): update s3 endpoints 
add new regions
https://docs.aws.amazon.com/general/latest/gr/s3.html#regional-endpoints
 2023-04-25 10:35:23 +00:00
__ f45c7e5299 fix: exclude scaleway S3 object storage 
- https://www.scaleway.com/en/docs/storage/object/quickstart/
- https://www.scaleway.com/en/docs/storage/object/api-cli/object-storage-aws-cli/
 2023-04-25 09:54:10 +00:00
MDLeom 8aa4d2334c
fix: cloudflare radar dataset is now in csv format 
instead of zip
 2023-01-16 07:09:35 +00:00
MDLeom b5048417b0
style(sed): avoid backslash in insert option 
- simpler and more readable
- https://unix.stackexchange.com/a/99351
 2022-12-17 00:19:11 +00:00
MDLeom 97cec9d0e8
feat: add csv file for Splunk lookup 
- https://docs.splunk.com/Documentation/Splunk/9.0.2/Knowledge/Aboutlookupsandfieldactions
 2022-12-17 00:06:59 +00:00
MDLeom 53c62b74c3
docs(header): switch date format from RFC 5322 to ISO 8601 
- universally readable
 2022-12-16 08:18:00 +00:00
MDLeom 0f9696c4f5
fix(exclude): interspar.at 
- https://spar-international.com/country/austria/
- close #25
 2022-12-05 08:11:25 +00:00
MDLeom f5e5e95dd8
fix(exclude): atshop.io 
- close #42
 2022-12-05 08:05:47 +00:00
MDLeom 6303ff306f
fix(exclude): lt27.de 
- https://www.tiekoetter.com/en/services/
- close #41
 2022-12-05 08:03:50 +00:00
MDLeom 48b5a4fce1
fix(exclude): short.upm.es 
- https://en.wikipedia.org/wiki/Technical_University_of_Madrid
- closes #37
 2022-12-05 07:56:47 +00:00
MDLeom 13b9740e66
fix(exclude): netbank.takarekbank.hu 
- https://en.wikipedia.org/wiki/Takar%C3%A9kbank
- closes #47
 2022-12-05 07:53:55 +00:00
MDLeom 1ea3ce51f5
feat: decode O365 safelink 
- https://support.microsoft.com/en-us/office/advanced-outlook-com-security-for-microsoft-365-subscribers-882d2243-eab9-4545-a58a-b36fee4a46e2
 2022-12-04 03:53:09 +00:00
MDLeom 5a4a8bb9bc
refactor: xmlstarlet -> html-xml-utils 2022-12-01 10:00:32 +00:00
MDLeom e653ba90c6
fix: remove extra curl option 2022-11-26 01:31:21 +00:00
MDLeom 4bf534bdbc
feat: add Cloudflare Radar top 1m domains dataset 2022-11-25 07:19:20 +00:00
MDLeom c376e2a08f
feat: fallback to busybox dos2unix 2022-11-03 08:48:16 +00:00
MDLeom e51886ff44
feat: fallback to busybox dos2unix 2022-11-03 08:46:39 +00:00
MDLeom a50b2be515
fix: disable phishunt 
- closes #43
- closes #45
 2022-11-03 08:41:25 +00:00
MDLeom c623542b9a
fix(exclude): outlook.com 
- closes #44
 2022-11-03 07:07:26 +00:00
Ming Di Leom d7e71fe41b Merge branch 'main' into 'main' 
fix(exclude): login.microsoftonline.com

See merge request malware-filter/phishing-filter!4
 2022-11-02 10:41:13 +00:00
MDLeom f992002230
ci(cf): snort2.rules path 2022-11-01 09:41:33 +00:00
MDLeom 25207f5708
ci(cf): snort2.rules path 2022-11-01 09:37:52 +00:00
MDLeom b2edb64044
ci(cf): snort2.rules path 2022-11-01 09:22:15 +00:00
MDLeom 4f3a67a21f
ci(cf): remove plain snort2.rules 
- over 25MB limit of cf pages
- use phishing-filter-snort2.rules.gz or phishing-filter-snort2.rules.br
 2022-11-01 07:27:52 +00:00