Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Safe link detection #109

Open
6 tasks
lost-in-action opened this issue Aug 23, 2021 · 0 comments
Open
6 tasks

Safe link detection #109

lost-in-action opened this issue Aug 23, 2021 · 0 comments
Labels
enhancement New feature or request Hacktoberfest

Comments

@lost-in-action
Copy link
Contributor

lost-in-action commented Aug 23, 2021

Though about using https://developers.google.com/safe-browsing to detect phishing links.

Conditions:

  • When an user sends links, use Google Safe Browsing to analyze all of them. Can fetch the safe-browsing database and store it locally. Maybe fetching the database remotely every 5 minutes is good enough?
  • Follow redirects (URL shorteners).
  • Maybe avoid analyzing links to popular websites like twitter.com, github.com and many populars (whitelist).
  • (?) Filter application links, as an option (for example ms-cxh-full://0 when executed, opens a black window covering the screen, hard to eliminate).
  • (?) Deep analysis. For example, fetch the remote link, if it contains content related to trading a CS:GO item, and it's not in the real steam community website. Same for Discord gifts, those are pretty common, so maybe it's worth implementing.
  • (??) Analyze exe files, maybe using VirusTotal? (This condition is really intensive), or maybe prevent any scripts/executables to be sent? (as an option, it would be good)

NOTE: When fetching a remote website (for deep analysis), it should be better to use a legit user-agent (Chrome, Firefox), because some scam sites attempt to detect bots from user-agent and blacklist them

@Jasius Jasius added enhancement New feature or request Hacktoberfest labels Sep 29, 2021
@Jasius Jasius pinned this issue Sep 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request Hacktoberfest
Projects
None yet
Development

No branches or pull requests

2 participants