aws-alchemy/squidmagicanalizar el tráfico de red basado en web 🕶 para detectar servidores centrales de comando y control
Squidmagic es una herramienta diseñada para analizar el tráfico de red web y detectar servidores centrales de comando y control (C&C) y sitios maliciosos, utilizando el servidor proxy Squid y Spamhaus.
pip install -r requirements.txt
python squidmagic.py /squid/access.log
_ _ _
(_) | | (_)
___ __ _ _ _ _ __| |_ __ ___ __ _ __ _ _ ___
/ __|/ _` | | | | |/ _` | '_ ` _ \ / _` |/ _` | |/ __|
\__ \ (_| | |_| | | (_| | | | | | | (_| | (_| | | (__
|___/\__, |\__,_|_|\__,_|_| |_| |_|\__,_|\__, |_|\___|
| | __/ |
|_| |___/
Analyzing...
Analyzing by SBL Advisory...
Spam server detected, ip is 65.182.101.221
Analyzing by SBL_CSS Advisory...
safe server detected, host or ip is 65.182.101.221
Analyzing by PBL Advisory...
safe server detected, host or ip is 65.182.101.221