Scanning for Malicious Proxies
daviddworken.tumblr.com
Scanning for Malicious Proxies
1–7 of 7 posts
Re: Scanning for Malicious Proxies
#2Nice work! I might work on a ruby script to scan through the results to see if there are any really malicious websites.
Re: Scanning for Malicious Proxies
#3Nice work! I might work on a ruby script to scan through the results to see if there are any really malicious websites.
If you do end up discovering anything interesting, be sure to post it...
Re: Scanning for Malicious Proxies
#4Maybe check the HTTP status code to eliminate all those non-working proxies (or check if a specific string is at all in the output). This will most likely decrease the false positive output a lot, which means less stuff to analyze afterwards. :)
Re: Scanning for Malicious Proxies
#5Maybe check the HTTP status code to eliminate all those non-working proxies (or check if a specific string is at all in the output). This will most likely decrease the false positive output a lot, which means less stuff to analyze afterwards. :)
Yeah, write now I'm working on another python script to automatically go through the log and look for addition of JavaScript or a form so as to filter out the boring parts of the output.
Re: Scanning for Malicious Proxies
#6Nice work! I might work on a ruby script to scan through the results to see if there are any really malicious websites.
If you end up making one, send it to me! I'll happily credit you on the blog post.
Re: Scanning for Malicious Proxies
#7This is good. I'd like to give this a try and see what I will find out.