https://github.com/dobin/badfiles
A detailed list of potentially dangerous file extensions
https://github.com/dobin/badfiles
Last synced: 6 months ago
JSON representation
A detailed list of potentially dangerous file extensions
- Host: GitHub
- URL: https://github.com/dobin/badfiles
- Owner: dobin
- License: gpl-3.0
- Created: 2023-10-20T14:21:18.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-02-22T12:57:36.000Z (over 2 years ago)
- Last Synced: 2025-01-23T16:12:07.528Z (over 1 year ago)
- Language: HTML
- Homepage: https://badfiles.ch
- Size: 125 KB
- Stars: 9
- Watchers: 3
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# badfiles
List of dangerous or potentially malicious file extensions.
Used for:
* Content Filter Proxy blacklist
* Content Filter Proxy checks
* [Waasa](https://github.com/dobin/waasa)
Check it at: [badfiles.ch](https://github.com/dobin/badfiles)
## Where is the data coming from?
* [filesec.io](https://filesec.io) list
* [govcert.ch](https://govcert.ch/downloads/blocked-filetypes.txt) list
* IOProtect.ch list
* Microsoft [Blocked attachments in Outlook/Onenote/Teams
](https://support.microsoft.com/en-us/office/blocked-attachments-in-outlook-434752e1-02d3-4e90-9124-8b81e49a8519)
* [michalzobec List of blocked file extensions](https://github.com/michalzobec/Security-Blocked-File-Extensions-Attachments)
* ChatGPT
* Me
* [Chrome Safe Browsing list](https://github.com/chromium/chromium/blob/main/components/safe_browsing/content/resources/download_file_types.asciipb)
MITRE Initial Access and MITRE Execution is done based on my CTI.
The main reference file is located in the Waasa project at [info.yaml](https://github.com/dobin/waasa/blob/master/waasa/Data/info.yaml).
badfiles.ch is just a viewer. Check the waasa project more more information about the data sources.
## Dat Files
* `info.yaml`: List of bad file extensions as yaml
* `info.json`: `info.yaml` converted to json