kali-ki / banshy

Banshy is an browser extension to analyze files in cloud before download them.

Banshy

Banshy is a web extension that downloads and analyzes files in cloud, before downloading them to your computer.

When you click on a download, the extension blocks the download,then the backend downloads and analyzes the file, and returns the result to the front to releases the download or not.

⚠️ This project is still in development. Some updates should come in the futur. See last section of this page.

🚀 Performances

Banshy does not yet analyze all type of files. Let's see the performances of each type of files :

Type File	Well predicted	Analyze type
PDF	97%	AI (random forests)
EXE	49%	Static analyzed
MIC	43%	Static analyzed

💻 Install Banshy

🔌 Install extension

For now, the extension is only available for chromium browser (like chrome, Opera, Brave, ...).

• 1 - Go to extension paramaters on your chromium browser.

• 2 - Select "Load unpacker".

• 3 - Choose folder Frontend of the Banshy project.

🐋 Launch backend with Docker

To start the backend, you need Docker and Docker Compose.

• 1 - Go on Backend folder

• 2 - Use command : docker compose up -d

• 3 - To stop it : docker compose down

⚓ Launch backend with Kubernetes

The backend can also be launched with Kubernetes.

• 1 - Go on Kubernetes_Backend folder
• 2 - Read README.md

🏗️ Architecture

🚧 Improvements

This is an open source project, feel free to contribute or suggest any ideas.

banshy's Issues

Improve Office analyzer

Improve exe analyzer

Add external analyses in addition to the analyses present in Banshy Project

Via API calls to free hash databases

Add analyzers

Priority :

• 1 - DLL (dll)
• 2 - Installation file (msi, msix, ...)
• 3 - Image files (img, iso, ...)
• 4 - Code file (js, ps1, py, ...)

Manage compressed files (zip, rar, 7z, ...)

Manage mail attachments and all not public files

For now, the project works well with files downloadable with public links, but, for example, with mail attachments, it does not work.

Find more malicious PDF files to improve ML model

Check magic number of files

If the magic number of a file does not fit with its extension, return false during backend analyze.

Add Banshy extension to extension store

Improve Frontend

• Make fronted more intuitive for users
• Block download before analyzer returns result response