MISP
/
misp-warninglists
mirror of https://github.com/MISP/misp-warninglists
2
0
Fork 0
Code Issues Releases Wiki Activity
misp-warninglists/lists/captive-portals/list.json

36 lines
946 B
JSON
Raw Normal View History

Create captive-portals/list.json Warning list with hostnames used by different OS and devices (Mac OS, Microsoft Windows, Apple iOS, Google Android, Samsung Android, HTC Android, Amazon FireOS, Firefox Browser, Chrome OS) for detection of captive portals used in public Wi-Fi networks. The source for the list is the official documentation of the Wireless Broadband Alliance: https://captivebehavior.wballiance.com/ Additional Microsoft hostname www.msftconnecttest.com added from: https://learn.microsoft.com/de-de/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
2023-01-30 21:26:23 +01:00
{
"description": "Hostnames used by different desktop and mobile device operating systems for captive portal detection as documented by the Wireless Broadband Alliance.",
"list": [
fix: [captive-portals] jq all the things
2023-01-30 22:51:23 +01:00
"android.clients.google.com",
Create captive-portals/list.json Warning list with hostnames used by different OS and devices (Mac OS, Microsoft Windows, Apple iOS, Google Android, Samsung Android, HTC Android, Amazon FireOS, Firefox Browser, Chrome OS) for detection of captive portals used in public Wi-Fi networks. The source for the list is the official documentation of the Wireless Broadband Alliance: https://captivebehavior.wballiance.com/ Additional Microsoft hostname www.msftconnecttest.com added from: https://learn.microsoft.com/de-de/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
2023-01-30 21:26:23 +01:00
"apple.com",
fix: [captive-portals] jq all the things
2023-01-30 22:51:23 +01:00
"captive.apple.com",
Create captive-portals/list.json Warning list with hostnames used by different OS and devices (Mac OS, Microsoft Windows, Apple iOS, Google Android, Samsung Android, HTC Android, Amazon FireOS, Firefox Browser, Chrome OS) for detection of captive portals used in public Wi-Fi networks. The source for the list is the official documentation of the Wireless Broadband Alliance: https://captivebehavior.wballiance.com/ Additional Microsoft hostname www.msftconnecttest.com added from: https://learn.microsoft.com/de-de/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
2023-01-30 21:26:23 +01:00
"clients3.google.com",
"clients4.google.com",
"connectivitycheck.android.com",
"connectivitycheck.gstatic.com",
"d2uzsrnmmf6tds.cloudfront.net",
fix: [captive-portals] jq all the things
2023-01-30 22:51:23 +01:00
"detectportal.firefox.com",
Create captive-portals/list.json Warning list with hostnames used by different OS and devices (Mac OS, Microsoft Windows, Apple iOS, Google Android, Samsung Android, HTC Android, Amazon FireOS, Firefox Browser, Chrome OS) for detection of captive portals used in public Wi-Fi networks. The source for the list is the official documentation of the Wireless Broadband Alliance: https://captivebehavior.wballiance.com/ Additional Microsoft hostname www.msftconnecttest.com added from: https://learn.microsoft.com/de-de/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
2023-01-30 21:26:23 +01:00
"msftncsi.com",
fix: [captive-portals] jq all the things
2023-01-30 22:51:23 +01:00
"spectrum.s3.amazonaws.com",
"www.airport.us",
"www.androidbak.net",
"www.apple.com",
"www.appleiphonecell.com",
"www.google.com",
"www.gstatic.com",
"www.ibook.info",
"www.itools.info",
Create captive-portals/list.json Warning list with hostnames used by different OS and devices (Mac OS, Microsoft Windows, Apple iOS, Google Android, Samsung Android, HTC Android, Amazon FireOS, Firefox Browser, Chrome OS) for detection of captive portals used in public Wi-Fi networks. The source for the list is the official documentation of the Wireless Broadband Alliance: https://captivebehavior.wballiance.com/ Additional Microsoft hostname www.msftconnecttest.com added from: https://learn.microsoft.com/de-de/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
2023-01-30 21:26:23 +01:00
"www.msftconnecttest.com",
fix: [captive-portals] jq all the things
2023-01-30 22:51:23 +01:00
"www.thinkdifferent.us"
Create captive-portals/list.json Warning list with hostnames used by different OS and devices (Mac OS, Microsoft Windows, Apple iOS, Google Android, Samsung Android, HTC Android, Amazon FireOS, Firefox Browser, Chrome OS) for detection of captive portals used in public Wi-Fi networks. The source for the list is the official documentation of the Wireless Broadband Alliance: https://captivebehavior.wballiance.com/ Additional Microsoft hostname www.msftconnecttest.com added from: https://learn.microsoft.com/de-de/troubleshoot/windows-client/networking/internet-explorer-edge-open-connect-corporate-public-network
2023-01-30 21:26:23 +01:00
],
"matching_attributes": [
"hostname",
"domain",
"url",
"domain|ip"
],
"name": "Captive Portal Detection Hostnames",
"type": "string",
"version": 20230130
}