https://github.com/julioliraup/Antiphishing

Suricata rulesets for protect against phishing attack.
https://github.com/julioliraup/Antiphishing

Last synced: about 2 months ago
JSON representation

Suricata rulesets for protect against phishing attack.

• Host: GitHub
• URL: https://github.com/julioliraup/Antiphishing
• Owner: julioliraup
• License: gpl-3.0
• Created: 2024-06-14T21:50:56.000Z (3 months ago)
• Default Branch: main
• Last Pushed: 2024-07-29T21:20:47.000Z (about 2 months ago)
• Last Synced: 2024-07-30T03:21:51.962Z (about 2 months ago)
• Language: Python
• Homepage:
• Size: 205 MB
• Stars: 2
• Watchers: 1
• Forks: 1
• Open Issues: 4
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-suricata - Antiphishing - Suricata rules and datasets to detect phishing attacks. (Rule Sets)

README

        
![Antiphishing logo](img/antiphishing.png)

> Protect against phishing attacks

# Functionality

This rule is built using malicious URLs and domains involved in phishing attacks. We utilize some community APIs to construct these rules, and with them, we create TLS, DNS, and HTTP rules.

Our sources:

1. [Phishstats](https://phishstats.info)

2. [Openphish](https://openphish.com/)

# Use

After download `antiphishing.rules` and `phishing.lst` move for `/etc/suricata` or you directory rulesets.

Now restart suricata daemon.

# Updates

Our rule updates hourly and includes SIDs that take other rulesets into consideration. Range: 6000000 - 6100000