spacecase123 / maltrailworld

Malicious traffic detection system

MaltrailWorld

The best of Mailtrail and MalwareWorld finally together.

With this tool you can easly discover suspicious activities in your network using an update, centralized and huge blacklist of hosts that could be related to malicious activities.

MaltrailWorld-VPN

You can have privacy + malware detection using MaltrailWorld-VPN.

This is a very easily deployable VPN powered by OpenVPN whose traffic will be analyzed by MaltrailWorld. Then, you will win the privacy given by a VPN and the security given by MaltrailWorld, AND IT'S ALL OPENSOURCE!

Check this project here: MaltrailWorld-VPN

MalwareWorld

MalwareWorld is a proyect that merge more than 500 blacklists in order to create a huge blacklist of suspicious domains and IPs. This projects looks for hosts that:

• Are infected with malware
• Attack other hosts
• Send spam
• Contains phishing sites
• Are bitcoin nodes
• Are Tor exit nodes or web-to-tor hosts
• Are public proxies
• Have bad reputation
• Are related to adware

Maltrail

Mailtrail is a malicious traffic detection system, utilizing publicly available (black)lists containing malicious and/or generally suspicious trails, along with static trails compiled from various AV reports and custom user defined lists, where trail can be anything from domain name (e.g. zvpprsensinaix.com for Banjori malware), URL (e.g. http://109.162.38.120/harsh02.exe for known malicious executable), IP address (e.g. 185.130.5.231 for known attacker) or HTTP User-Agent header value (e.g. sqlmap for automatic SQL injection and database takeover tool). Also, it uses (optional) advanced heuristic mechanisms that can help in discovery of unknown threats (e.g. new malware).

Maltrail changes

By default Maltrail is configured to use HTTPS and the pem file is expected to be located in /home/maltrailworld/maltrailworld/misc/server.pem (this can be changed in the file maltrail.conf)

The password has been changed. Use admin:%MalwareWorld% to login