Alexandre Dulaunoy
963381c839
chg: [tld] updated to the latest version
2020-08-11 10:29:32 +02:00
Alexandre Dulaunoy
a2355251ac
chg: [aws] updated
2020-08-10 14:46:50 +02:00
Alexandre Dulaunoy
fea9465eb5
chg: [office 365] updated
2020-08-10 14:45:58 +02:00
Alexandre Dulaunoy
746e0ba5d0
chg: [office 365] updated
2020-08-10 14:45:05 +02:00
aa81303fd0
Merge remote-tracking branch 'upstream/main' into main
2020-07-27 10:56:55 +02:00
a9c163ef20
Refactor last scripts, logging, central directory for downloads
...
* Refactored generate_moz-top50.py
* Download all file to new /tmp file to centralize all downloads
* Add central logging to generators.log file
* Create Bash script that generates all warninglists
* Add /tmp folder and extra files to .gitignore
* Start adding exception handling in download_to_file and write_to_file
2020-07-27 10:44:30 +02:00
Alexandre Dulaunoy
4636dc5640
chg: [mozilla-intermediate-CA] updated to the latest version
2020-07-27 10:17:17 +02:00
610292e90f
Refactor more generators
2020-07-21 13:42:50 +02:00
d3e87dc7ae
Refactor code to make it simpler/more uniform
2020-07-21 01:21:28 +02:00
d32eb23a58
Chg generator-publicdns: work with new CSV format
...
1. The CSV format has changed with the update on 2020-07-14.
2. The script also generates IPv4, IPv6, and the hostname lists at once.
3. Downloaded file added to .gitignore
2020-07-21 00:38:50 +02:00
9ba47c1463
Added multiple lists from Cisco Umbrella list. Solves issue #24 and #13
2020-07-17 12:31:29 +02:00
6837ba016c
Updated lists after updating scripts
2020-07-17 10:10:04 +02:00
e0b3968635
Merge tranco scripts,:generate_tranco.py generates both full and 10k list
2020-07-17 09:23:39 +02:00
cde6059d73
Update Tranco & Tranco10k list
2020-07-14 16:38:12 +02:00
Alexandre Dulaunoy
db0bf3305f
chg: [whats-my-ip] fix 152
2020-07-09 08:34:43 +02:00
Alexandre Dulaunoy
7a28900663
Merge branch 'main' of github.com:MISP/misp-warninglists into main
2020-07-08 14:54:14 +02:00
f493aa451d
Update TLDs list
2020-07-06 16:20:48 +02:00
c6a361c7a1
adding forms.gle which is for google forms.
...
adding forms.gle to the list. This is a short link for Google Forms managed by Google Firebase
2020-06-23 17:06:04 -05:00
fbab4c59dc
added gvt1.com to Google domains warning list.
2020-06-19 11:03:32 -05:00
dfa999922e
Fixed typo
...
Fixed typo in list.json
2020-06-11 11:30:36 -05:00
Alexandre Dulaunoy
067bd58464
chg: [jq] all
2020-06-11 18:19:26 +02:00
Alexandre Dulaunoy
32d98c4588
chg: [tranco10k] jq all the things
2020-06-11 18:16:03 +02:00
a64b67ed85
Create tranco10k list.json
2020-06-11 10:08:36 -05:00
Alexandre Dulaunoy
78590f3526
chg: [amazon-aws] updated to the latest version
2020-05-19 16:28:49 +02:00
Alexandre Dulaunoy
470b86dba4
chg: [microsoft-office365] updated to the latest version
2020-05-19 16:26:42 +02:00
d22e04f776
Update list.json
...
Make hostname only, same for another one already in the list.
2020-04-30 20:48:23 +02:00
cd9b83878e
Update list.json
2020-04-29 22:07:46 +02:00
2c116cbd1f
fix: Sort entries
2020-04-23 11:56:05 +02:00
58150d8b22
chg: [covid] added covidmemory.lu
2020-04-13 11:59:05 +02:00
28687d90d5
jq the covid lists
2020-04-07 06:14:20 +02:00
64e86acbf5
Merge branch 'master' of github.com:MISP/misp-warninglists
2020-04-07 06:13:06 +02:00
10ddaf06d2
chg: covid lists bumped
2020-04-07 06:10:44 +02:00
300d823638
chg: Add script to make lists unique, and sort the keys.
...
Update covid lists.
2020-04-03 13:37:17 +02:00
bad8b17fff
chg: [covid] lists updated
2020-04-03 06:14:40 +02:00
c14634a031
new: added covid generators / lists
2020-04-01 12:00:55 +02:00
Alexandre Dulaunoy
17e72c085d
chg: [whats-my-ip] Fix #139
2020-04-01 11:10:20 +02:00
ac94a55fd2
version change
2020-04-01 09:53:45 +03:00
2eca8bba64
arcgis whitelist
2020-04-01 09:51:17 +03:00
Alexandre Dulaunoy
bf165aa26b
chg: [covid] aatishb.com added due to https://aatishb.com/covidtrends/
...
(thanks to @doegox)
2020-03-31 10:12:16 +02:00
Alexandre Dulaunoy
539c6bc8fd
chg: [covid] added Heliox_lab domain
2020-03-31 09:55:46 +02:00
2aea18106c
Update list.json
...
Add CAPEv2
2020-03-28 13:26:17 +01:00
e6f9ebb171
chg: [covid] adding luxemburg's covid domains.
2020-03-27 14:41:12 +01:00
b6e5123609
duplicate removed
2020-03-27 04:04:02 +01:00
c3cdd6b274
added info-coronavirus.be
2020-03-26 16:05:09 +01:00
93ee083d72
update to the covid list
2020-03-26 14:27:59 +01:00
035a6c8406
chg: [covid] added Portugal and Belgium
2020-03-26 10:59:18 +01:00
00b6fafdff
new: added covid warninglist
2020-03-26 05:59:12 +01:00
Alexandre Dulaunoy
192d112728
chg: [tranco] updated to the latest version
2020-03-05 13:33:15 +01:00
c501dc5e71
new: added common warninglists
2020-02-26 10:52:09 +01:00
Alexandre Dulaunoy
659264240a
chg: [office365] updated to the latest version
2020-02-10 11:24:09 +01:00
Alexandre Dulaunoy
b5a1b192bf
chg: [cloudflare] updated to the latest version
2020-02-10 11:20:16 +01:00
Alexandre Dulaunoy
e504b9aaa7
chg: [aws] updated
2020-02-10 11:19:06 +01:00
467c1b0a95
Create list.json
2020-02-03 01:04:53 -06:00
ff12879d94
Update list.json
...
Adds localizaip domains.
2020-02-02 21:10:42 +01:00
e1859dca76
Added domain cutt.ly
2020-02-01 22:18:30 -06:00
10b1ed7187
Update list.json
...
merky.de
2020-01-31 14:34:30 +01:00
f97ffb4ab9
Added windowsupdate.com domain
...
I received false positives and detections for this domain. Thought it should added.
2020-01-23 11:00:22 -06:00
7b1fb4719e
Update list.json
...
Adds ipv6-test
2020-01-21 19:19:41 +01:00
e5a5ac576b
Added domains using Azuredns-prd.info as Nameserver
...
azuredns-prd.info is verified as being Microsoft owned and operated for some Azure related domains
2020-01-13 12:31:43 +01:00
20add1b22a
add Tranco warning list ( https://tranco-list.eu/ )
2020-01-10 15:28:29 +01:00
edcd8244a8
Update list.json
...
Bump version number, add/edit domains.
2020-01-09 21:40:28 +01:00
8a7c21452c
Update list.json
...
Add Extreme IP.
2020-01-06 19:36:34 +01:00
Alexandre Dulaunoy
260171d89b
chg: [cloudflare] updated
2019-12-12 07:47:39 +01:00
Alexandre Dulaunoy
da9fb56f7e
Merge branch 'master' of github.com:MISP/misp-warninglists
2019-12-12 07:46:13 +01:00
Alexandre Dulaunoy
6351521254
chg: [office365] IP addresses and domains updated
2019-12-12 07:45:48 +01:00
1e654dca9d
add sinkhole IP
...
https://dns.google.com/query?name=sinkhole.dynu.net
https://dns.google.com/query?name=a.sinkhole.yourtrap.com&type=A&dnssec=true
2019-11-12 16:15:51 -05:00
cca1f833ad
Add domain
2019-11-10 22:46:40 +01:00
5758200902
Add sndbox
2019-11-08 20:20:25 +01:00
3789dbf107
Add additional Sinkhole IPs
...
https://github.com/brakmic/Sinkholes/pull/10/files
https://github.com/brakmic/Sinkholes/pull/12/files
https://github.com/grettir/malware-sinkholes/pull/2/files
2019-11-08 01:43:53 -05:00
8bae4eaec9
Fixed typo in akamai list description
2019-11-04 16:35:20 +00:00
5aba6bb296
Update list.json
...
Add some systems.
2019-10-31 19:52:16 +01:00
cb3be69184
chg: [wikimedia] jq all the things
2019-09-12 11:12:32 +02:00
622bd3510e
add: [wikimedia] adds a warning list for wikimedia infrastructure.
2019-09-12 11:09:16 +02:00
bb322b46e1
Remove erroneous space character and bump version
2019-08-09 10:39:22 +02:00
Alexandre Dulaunoy
554360add3
chg: [university_domains] updated to the latest version
2019-07-25 08:14:07 +02:00
Alexandre Dulaunoy
f7255b53a8
chg: [disposable] updated to the latest version
2019-07-24 21:48:15 +02:00
Alexandre Dulaunoy
81e52bd18f
chg: [vpn] IP addresses updated
2019-07-24 21:45:59 +02:00
Alexandre Dulaunoy
b5d4ba91a5
chg: [mozilla] CA list updated
2019-07-24 21:42:55 +02:00
1183e52389
Added list for Googlebot crawler IP ranges
2019-07-24 17:37:35 +02:00
4b5c9d6dd4
Added list with Google gmail sending IPs
2019-07-24 17:36:13 +02:00
d22c6902b3
Added list and tool to generate list for cloudflare IP ranges.
2019-07-24 17:35:39 +02:00
eacd74ec67
Name change ING, new bank Mainzer Volksbank
2019-07-19 11:33:28 +02:00
Alexandre Dulaunoy
2b571d2af3
chg: [empty-hashes] empty ssdeep hashes added
2019-05-24 10:13:53 +02:00
Alexandre Dulaunoy
a05fbf3480
chg: [dax30] updated and fixed
2019-05-09 10:23:41 +02:00
57d0f89e1d
Update list.json
...
Adding BMW
2019-05-08 11:59:22 +02:00
4b0913a361
dax30 inital version
2019-05-08 11:54:53 +02:00
Alexandre Dulaunoy
4d8ce3986f
Merge pull request #106 from SteveClement/tools
...
fix: [alexa] The generator wants to decode things ;)
2019-04-24 15:38:25 +02:00
Steve Clement
5d9e43bd82
chg: [moz500] Fix actual list.
2019-04-24 14:44:39 +09:00
Steve Clement
14a675a70a
fix: [moz500] Fix the confusion about Moz.com and Mozilla.com
2019-04-24 14:42:41 +09:00
Steve Clement
a5a3567733
chg: [alexa] Updated with the script in tools
2019-04-24 10:55:44 +09:00
Steve Clement
190312cf0f
chg: [moz500] Added Pages too. Updated list
2019-04-24 10:36:22 +09:00
Steve Clement
f41f976ce6
chg: [moz500] Added info how to regenerate, added provisional urls/files
...
to topPages.
2019-04-24 10:23:40 +09:00
Steve Clement
9e0b2ebc75
new: [list] Added Mozilla Top 500 domains
2019-04-24 09:45:56 +09:00
Alexandre Dulaunoy
f24f97fe87
chg: [security-provider-blogpost] version updated
2019-04-21 16:27:25 +02:00
65a32242ae
Removed pastebin.com, as it is not a security provider.
...
It is often used by malware to download configuration or payloads.
2019-04-15 13:31:15 +02:00
910db07435
Remove wrong line from vpn-ipv4.
2019-04-11 10:14:29 +02:00
edaea7c3a6
Transform URL to domains for few entries
...
Remove / or http for some domains.
2019-04-08 15:45:26 +02:00
af7e5a188c
CAs: Fix final new line in json
2019-03-29 16:57:54 +01:00
d4e749c3e6
CAs: Fix json indentation (2 spaces, not 4)
2019-03-29 16:55:34 +01:00
a1c0e83bd4
Add warning lists based on Mozilla's trusted CA and Intermediates
2019-03-29 16:23:22 +01:00
db8313a531
fix: Flienames of new warning lists
2019-03-25 11:34:15 +01:00
Alexandre Dulaunoy
48a5e32d50
new: [disposal-email] added
2019-03-24 12:02:30 +01:00
Alexandre Dulaunoy
5ed5403157
new: [VPN] lists of common VPN IPv4 and IPv6 addresses added
...
Source of the IPv4/IPv6 is https://github.com/ejrv/VPNs
2019-03-24 11:17:59 +01:00
d0941e0418
Make sure that matching attributes are consistent for lists that include domains
2019-03-15 11:21:35 +01:00
ea0968bd5e
updated office 365 file names, changed string to substring, and changed lists.json to list.json
2019-03-11 20:56:19 -04:00
Alexandre Dulaunoy
97a951de82
chg: [o365 ip] title of the warning list changed
2019-03-10 09:30:03 +01:00
Alexandre Dulaunoy
6e97b8bf8a
chg: [o365] separate Microsoft Office 365 lists (hostname and IP addresses)
2019-03-10 09:27:12 +01:00
Alexandre Dulaunoy
37bf8ca5f2
chg: [o365] jq all the things
2019-03-10 09:13:37 +01:00
Alexandre Dulaunoy
0cc3ad9d82
Merge branch 'master' of https://github.com/kx499/misp-warninglists into kx499-master
2019-03-10 09:13:03 +01:00
91d77374ff
updated MS O365 script to handle json and updated list.json
2019-03-09 19:43:13 -05:00
Alexandre Dulaunoy
5db8316e93
chg: [alexa] updated to the latest version (seems to be back)
2019-03-09 17:25:02 +01:00
Alexandre Dulaunoy
cf4819fb48
chg: [cisco/umbrella top list] updated to the latest version
2019-03-09 17:23:13 +01:00
Alexandre Dulaunoy
64139ec29f
chg: [amazon-aws] updated to the latest version available
2019-03-09 17:18:57 +01:00
Alexandre Dulaunoy
882580e90c
chg: [akamai] jq everything
2019-03-09 17:10:07 +01:00
b6fed81a87
adding akamai warning list
2019-03-09 10:56:15 -05:00
Alexandre Dulaunoy
d24febd23c
Merge pull request #93 from ater49/master
...
Adding university domains warninglist
2019-03-01 22:43:14 +01:00
8fb2126255
Correction of duplicate
2019-03-01 22:28:35 +01:00
2e776cec5d
Adding university domains warninglist from issue #38
2019-03-01 18:47:05 +01:00
Alexandre Dulaunoy
68f97da4d9
Merge pull request #91 from ater49/master
...
Adding CRL Whistelist (Issue #83 )
2019-03-01 13:05:49 +01:00
78b88a0b43
Modifying type from string to substring
2019-03-01 12:59:32 +01:00
9301f73b71
Modifying version number to int
2019-03-01 12:53:57 +01:00
f3bf7a634d
Correction for non-unique values in json
2019-03-01 12:24:56 +01:00
7bca524be2
Adding CRL Whistelist (Issue #83 )
2019-03-01 09:40:32 +01:00
Alexandre Dulaunoy
8b7f943dd2
Merge pull request #90 from ater49/master
...
Adding cape.contextis.com in sandbox warninglist
2019-02-28 20:38:59 +01:00
7254758919
JQing all the things
2019-02-27 08:19:20 +01:00
6f3989cb17
Adding "cape.contextis.com" to sandbox warninglists.
2019-02-27 08:17:27 +01:00
21c3f2cd98
Merge pull request #89 from robertnixon2003/master
...
Updated Cisco warninglist
2018-12-17 18:54:01 +01:00
427e224914
Added type
2018-12-17 11:06:30 -05:00
e7ee0fef51
Fixed with jq all the things
2018-12-17 10:58:03 -05:00
b34c832fcb
Add files via upload
2018-12-17 10:54:23 -05:00
409047475a
Update list.json
2018-12-17 10:52:13 -05:00
371f1bf6d4
Create list.json
2018-12-17 10:50:52 -05:00
92cdd668ab
Delete list.json
2018-12-17 10:49:15 -05:00
e3ff169a27
added the shortener of the german state rlp
...
added the shortener of the german state rhineland-palatinate (rlp)
2018-11-19 16:04:09 +01:00
9b238dc531
more german bank sites
2018-11-16 14:30:04 +01:00
Alexandre Dulaunoy
9f034b34cb
chg: [public-dns-v6] cloudflare dns added
2018-11-14 20:57:16 +01:00
Alexandre Dulaunoy
b06e087893
chg: [public-dns-v4] cloudflare recursive dns added
2018-11-14 20:55:57 +01:00
Alexandre Dulaunoy
3027a8a049
chg: [amazon-aws] updated to the recent version
2018-11-09 08:11:05 +01:00
e4e919b584
fixed value in ovh-cluster and added new url shortener
2018-11-07 10:59:31 +01:00
f308245af8
Removing imgur.com from the list of known security providers/vendors blog domains
2018-11-06 13:53:23 +01:00
Alexandre Dulaunoy
0bd8f8d161
Merge pull request #82 from robertnixon2003/master
...
Updated Cisco Top 1000 List
2018-10-12 16:40:11 +02:00
593ed90418
Updated list "version": 20181012
2018-10-12 10:03:21 -04:00
54acd57414
Deleting list to add updated list.
2018-10-12 10:00:56 -04:00
Alexandre Dulaunoy
a205adba1f
chg: [sinkholes] duplicate entry removed
2018-09-26 23:05:32 +02:00
Alexandre Dulaunoy
c6fc6e89fe
chg: [sinkholes] added
2018-09-26 22:56:47 +02:00
Alexandre Dulaunoy
db7507335b
Merge pull request #80 from ater49/master
...
New warninglist for bank websites.
2018-09-07 20:44:56 +02:00
4544fa2f02
New warninglist for bank websites.
...
The list is based on university proxylist (ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/bank.tar.gz).
2018-09-07 16:17:04 +02:00
20332a7577
win10 connection endpoints
2018-08-31 14:22:03 +02:00
8f3ca0c945
Pulled list again after fixing generation script
2018-08-20 09:18:00 -04:00
e333db3df2
Added Alexa list back.
2018-08-10 09:19:10 -04:00
f4d480bdf0
Updated list
2018-08-10 09:14:26 -04:00
0b4f1f32d4
Created new list.
2018-08-10 08:46:15 -04:00
5d09fee1b2
Removed Alexa List
2018-08-10 08:42:04 -04:00
Alexandre Dulaunoy
d378c4e9ef
add: [microsoft-attack-simulator] warning list about phishing campaign for "security awareness"
2018-07-11 08:33:28 +02:00
Alexandre Dulaunoy
017d9b220f
add: common IOC false-positives as mentioned by Florian Roth
2018-07-06 17:43:04 +02:00
db77c14a28
[add] new domain for whats-my-ip section
2018-07-03 21:33:28 +01:00
33773ebf2a
Update version file
2018-06-14 19:00:15 +02:00
af9b455611
Added the required separtor #2
2018-06-13 19:00:58 +02:00
c647fc2d5c
Added the required separator
2018-06-13 19:00:08 +02:00
525835a1d6
Updated with italian "what's my ip" services
2018-06-13 18:54:42 +02:00
83dbe9492e
[ADD] 1 new domain for url-shortener section
2018-05-27 15:54:00 +01:00
1dde94bdb2
[ADD] 3 new domains for whats-my-ip section
2018-05-27 15:52:10 +01:00
0ee3bbc5aa
[ADD] 1 new domain for url-shortener section
2018-05-11 23:49:27 +01:00
a6ad9f8c13
[ADD] 3 new domains for whats-my-ip section
2018-05-11 23:41:10 +01:00
74da00dc71
[ADD] 3 new domains for whats-my-ip section
2018-05-11 00:15:10 +01:00
Alexandre Dulaunoy
bd95487001
add: BIT gTLD was missing
2018-04-24 21:02:04 +02:00
ae36fcdd50
Update list.json
2018-03-29 14:47:55 +02:00
1508f08f73
Update list.json
2018-03-29 14:35:54 +02:00
5c3eef522e
Update list.json
2018-03-29 14:34:47 +02:00
1112c45f9f
Create list.json
2018-03-29 14:32:53 +02:00
Alexandre Dulaunoy
d44ab414c9
Fix #64
2018-03-20 16:56:30 +01:00
Alexandre Dulaunoy
42c5cf055c
Indeed LoL is not a security provider ;-) Fix #62
2018-02-28 18:49:56 +01:00
Alexandre Dulaunoy
ac091864d6
Merge pull request #61 from ater49/dev
...
Adding Ovh-cluster WarningList
2018-02-23 16:18:01 +01:00
780e039183
Modification of errors in json
2018-02-23 13:46:41 +01:00
34de79554d
Modify errors
2018-02-23 13:44:59 +01:00
ea30930ad8
Revert "New WarningList for OVH Cluster"
...
Thir reverts commit 2bf5201110
2018-02-23 13:43:43 +01:00
2bf5201110
New WarningList for OVH Cluster
2018-02-23 13:38:25 +01:00
156c6015db
OVH Cluster IP add to misp-warninglists
2018-02-23 13:24:53 +01:00
Alexandre Dulaunoy
742804d231
Merge pull request #57 from eCrimeLabs/master
...
Bugfix and update
2018-02-23 11:21:43 +01:00
51df1b8a00
Updated with IPv6 addresses
2018-02-22 10:58:51 +01:00
Alexandre Dulaunoy
327e26558b
Merge pull request #55 from eCrimeLabs/master
...
Amazon AWS IP range for Warninglists
2018-02-22 09:46:28 +01:00
e0fdabb9df
add app.any.run in warninglists
2018-02-22 09:22:49 +01:00
2093121c96
Added "type": "cidr",
2018-02-21 23:28:06 +01:00
b58e05fb87
Added Warninglists for Amazon AWS
2018-02-21 22:00:15 +00:00
2e146933dc
elements must be unique
2018-02-19 11:44:56 +01:00
92a0fafbf2
add security provider blogpost warninglist
2018-02-19 11:12:27 +01:00
cc1dcad151
Resolving outdated list from #51
...
@adulau
2018-02-06 10:24:57 +01:00
db651287ea
Added some security vendors sites
2018-01-23 10:13:47 +01:00
Alexandre Dulaunoy
6781447c8d
fix: perfect match is string ;-)
2018-01-18 16:46:46 +01:00
2d44843c56
Changed matching algorithm to domain to avoid false positive matches
...
Changed matching algorithm to domain to avoid false positive matches + version bump
2018-01-17 16:55:02 +01:00
c78dcd03e8
version bump
2018-01-15 13:48:16 +01:00
02e0b8fd84
Wrong algorithm
2018-01-15 13:47:53 +01:00
be72d81975
Changed matching algorithm to domain to avoid false positive matches
2018-01-15 12:13:34 +01:00
Alexandre Dulaunoy
a5bf49c85c
fix: reverse.it added to the list of dynamic malware analysis tools
2018-01-03 11:32:46 +01:00
Alexandre Dulaunoy
8ec2a3a98d
add: automated-malware-analysis known domain list
...
Fix #45
2017-12-29 20:01:55 +01:00
Alexandre Dulaunoy
ac2beeea02
add: Microsoft Azure Datacenter IP Ranges added including tool to
...
generate the JSON.
Fix #43
2017-12-29 15:39:52 +01:00
Alexandre Dulaunoy
bebc51fd86
fix (temp): office 365 warning list only matching as substring (new list
...
for CIDR block matching required)
2017-12-29 15:33:21 +01:00
Alexandre Dulaunoy
23d4b68de3
add: list of Microsoft office365/azure in China + extraction tool added
...
fix #42
2017-12-29 15:30:57 +01:00
Alexandre Dulaunoy
5ae117f7a3
Office 365 warning-list updated to the latest version
2017-12-29 15:09:50 +01:00
60aeb28fe8
chg: Enforce type in schema
2017-12-22 15:32:24 +01:00
Alexandre Dulaunoy
Kevin Holvoet
Steve Clement