What is YALIH YALIH
A simple honeypot that collects credentials across various protocols
YALIH YALIH (Yet Another Low Interaction Honeyclient)
YALIH YALIH (Yet Another Low Interaction Honeyclient) is a low Interaction Client honeypot designed to identify malicious websites using techniques such as signature detection, anomaly detection, and pattern matching. * Collection of suspicious URLs from three different malicious website databases. * URL collection via the Bing API. * Gathering suspicious URLs from your inbox and SPAM folder using the POP3 and IMAP protocols. * Extraction, de-obfuscation, and de-minification of JavaScript scripts embedded in websites. * Handling referrer emulation and redirection. * Management of cookies and session data. * Emulation of browsers, browser agents, and operating systems. * Proxy capabilities to detect geo-location and/or IP cloaking attacks. * Signature detection utilizing the ClamAV antivirus database. * Anomaly and pattern matching detection through Yara (http://plusvic.github.io/yara/). * Automated generation of Yara signatures. =================================== Easy Installation and Documentation ==================================== Authors/Contributors: * Victoria University of Wellington * Masood Mansoori - <a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="f59894869a9a91db98949b869a9a879cb59298949c99db969a98">[email protected]</a> * Singapore Polytechnic * Lai Qi Wei - <a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="610d00081008160408525121090e150c00080d4f020e0c">[email protected]</a> Requirements:
YALIH YALIH Reviews
No reviews yet.
