{"id":13706121,"url":"https://github.com/RamadhanAmizudin/python-icap-yara","last_synced_at":"2025-05-05T19:34:33.520Z","repository":{"id":48066956,"uuid":"81106150","full_name":"RamadhanAmizudin/python-icap-yara","owner":"RamadhanAmizudin","description":"An ICAP Server with yara scanner for URL and content.","archived":false,"fork":false,"pushed_at":"2024-12-19T09:50:37.000Z","size":20,"stargazers_count":59,"open_issues_count":0,"forks_count":13,"subscribers_count":5,"default_branch":"master","last_synced_at":"2025-04-26T03:29:41.934Z","etag":null,"topics":["icap","icap-server","malware-analysis","python","squid-proxy","yara"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RamadhanAmizudin.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-02-06T16:17:59.000Z","updated_at":"2025-02-08T14:18:02.000Z","dependencies_parsed_at":"2022-08-12T17:50:47.877Z","dependency_job_id":null,"html_url":"https://github.com/RamadhanAmizudin/python-icap-yara","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RamadhanAmizudin%2Fpython-icap-yara","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RamadhanAmizudin%2Fpython-icap-yara/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RamadhanAmizudin%2Fpython-icap-yara/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RamadhanAmizudin%2Fpython-icap-yara/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RamadhanAmizudin","download_url":"https://codeload.github.com/RamadhanAmizudin/python-icap-yara/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":252563160,"owners_count":21768413,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["icap","icap-server","malware-analysis","python","squid-proxy","yara"],"created_at":"2024-08-02T22:00:52.383Z","updated_at":"2025-05-05T19:34:33.508Z","avatar_url":"https://github.com/RamadhanAmizudin.png","language":"Python","funding_links":[],"categories":["Network","Tools"],"sub_categories":["Other Resources"],"readme":"Yara Python ICAP Server \n=====================\nAn ICAP Server with yara scanner for URL and content.\n\n## Requirement\n* Squid Proxy 3.5\n* Python 3\n\n## Squid Configuration\n```\nicap_enable on\nicap_preview_enable off\nicap_send_client_ip on\nicap_send_client_username on\nicap_service service_resp respmod_precache bypass=1 icap://127.0.0.1:1344/yara\nadaptation_access service_resp allow all\n```\n\n## Running\n```\n$ git clone https://github.com/RamadhanAmizudin/python-icap-yara\n$ pip install -r requirements.txt\n$ python server.py\n```\n\n## Config File\n```\n[config]\ncontent_rules = \u003cfull path to rules\u003e\nurl_rules = \u003cfull path to rules\u003e\ncontent_dir = \u003cdirectory where data will be stored\u003e\n```\n\n## Log Content\n```\n{\n    \"content\": \"\u003chex of content\u003e\",\n    \"request_header\": {\n        \"accept\": [\n            \"*/*\"\n        ],\n        \"host\": [\n            \"blog.honeynet.org.my\"\n        ],\n        \"user-agent\": [\n            \"curl/7.47.0\"\n        ]\n    },\n    \"response_header\": {\n        \"content-type\": [\n            \"text/html; charset=UTF-8\"\n        ],\n        \"date\": [\n            \"Mon, 06 Feb 2017 15:55:31 GMT\"\n        ],\n        \"link\": [\n            \"\u003chttp://blog.honeynet.org.my/wp-json/\u003e; rel=\\\"https://api.w.org/\\\"\",\n            \"\u003chttp://wp.me/6OPJo\u003e; rel=shortlink\"\n        ],\n        \"server\": [\n            \"Apache/2.2.22 (Ubuntu)\"\n        ],\n        \"vary\": [\n            \"Accept-Encoding\"\n        ]\n    },\n    \"rules\": [\n        \"list of rules triggered\"\n    ]\n}\n```\n\nQuestions \u0026 Comments\n=====================\nIf you encounter a bug, please feel free to post it on GitHub. For questions or comments.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FRamadhanAmizudin%2Fpython-icap-yara","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FRamadhanAmizudin%2Fpython-icap-yara","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FRamadhanAmizudin%2Fpython-icap-yara/lists"}