MISP
/
misp-warninglists
mirror of https://github.com/MISP/misp-warninglists
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #245 from MichaelDwucet/MichaelDwucet-New-Warning-List-Captive-Portals 

Add Captive Portal detection hostnames
pull/247/head
Alexandre Dulaunoy 2023-01-30 22:50:40 +01:00 committed by GitHub
parent 96b11c084b b7635674c6
commit e9b5cac5f7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
lists/captive-portals/list.json Normal file
View File

@ -0,0 +1,37 @@
{
"description": "Hostnames used by different desktop and mobile device operating systems for captive portal detection as documented by the Wireless Broadband Alliance.",
"list": [
"www.apple.com",
"www.appleiphonecell.com",
"captive.apple.com",
"www.airport.us",
"www.ibook.info",
"www.itools.info",
"www.thinkdifferent.us",
"apple.com",
"clients3.google.com",
"clients4.google.com",
"android.clients.google.com",
"connectivitycheck.android.com",
"connectivitycheck.gstatic.com",
"www.gstatic.com",
"www.google.com",
"www.androidbak.net",
"connectivitycheck.android.com",
"connectivitycheck.gstatic.com",
"d2uzsrnmmf6tds.cloudfront.net",
"msftncsi.com",
"www.msftconnecttest.com",
"detectportal.firefox.com",
"spectrum.s3.amazonaws.com"
],
"matching_attributes": [
"hostname",
"domain",
"url",
"domain|ip"
],
"name": "Captive Portal Detection Hostnames",
"type": "string",
"version": 20230130
}