This is your work, valued

South Africa

Mitchell Krog

Elite
@mitchellkrogza

Linux Specialist focus on network security, intrusion detection, SSL and generally a safer internet. Proxmox, Wordpress, Woocommerce, Server Setup Expert 4 Hire

nginx-ultimate-bad-bot-blocker. Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

4.8k

apache-ultimate-bad-bot-blocker. Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders

974

The-Big-List-of-Hacked-Malware-Web-Sites. This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.

318

Fail2Ban.WebExploits. This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.

198

Fail2Ban-Blacklist-JAIL-for-Repeat-Offenders-with-Perma-Extended-Banning. A customised jail with action and filter file for Fail2Ban. This jail is based on the recidive jail but makes use of a simple text file to enable extended and permanent bans.

155

Badd-Boyz-Hosts. A hosts file for use on any operating system to block bad domains out of your servers or devices.

114

linux-server-administration-scripts. Simple bash administration scripts for Linux to make your life easier.

69

fail2ban-useful-scripts. A collection of useful scripts for automation of & easing maintenance of Fail2Ban

49

Suspicious.Snooping.Sniffing.Hacking.IP.Addresses. A daily updated list of suspicious, snooping, sniffing and hacking attempts from IP addresses against services like SSH, HTTP and Wordpress Hack Attempts

39

Stop.Google.Analytics.Ghost.Spam.HOWTO. How to stop Google Analytics "Ghost" Spam using a well curated list of spam referrer domains and web sites. Simple and easy to use with instructions for creating Segments in Google Analytics using our google-exclude files.

34

Badd-Boyz-Bitcoin-Scammers. A list of bitcoin addresses being used in Ransomware and Sextortion Scams

16

Travis-CI-for-Apache-For-Testing-Apache-and-PHP-Configurations. How to get Travis CI to test Apache code including vhosts and custom apache code like .htaccess rules or other scripts you have written and need to test using Travis CI's build checker.

11

Travis-CI-Nginx-for-Testing-Nginx-Configuration. How to get Travis CI to test Nginx code including nginx.conf, vhosts and custom nginx code you have written and need to test using Travis CI's build checker.

11

Top-Attacking-IP-Addresses-Against-Wordpress-Sites. Lists of the top attacking IP addresses trying to hack or compromise Wordpress web sites.

8

Global-List-Facebook-Groups-Keyword-Moderation-Alerts. The Global List of Facebook Groups Keywords for Moderation Alerts

7

nginx-badbot-blocker. Block bad, possibly even malicious web crawlers (automated bots) using Nginx

6

AjaxForm-PHPMailer-reCAPTCHA. Simple form using Ajax, validations, SMTP and reCAPTCHA v3 for PHP.

5

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

4

My-Gray-Hacker-Resources. Useful for CTFs, wargames, pentesting. Educational purposes.

4

webscreenshot. A simple script to screenshot a list of websites

4

phisherman. Extensible open source phishing incident response automation

4

Swift-Keylogger. Keylogger for mac written in Swift using HID

3

miteru. An experimental phishing kit detection tool

3

Badips.com-Hosts-File-Generator. A simple shell script to pull a daily list of known bad hosts from badips.com and create an /etc/hosts.deny file for you. Only hosts with a level 5 (bad) are pulled daily from badips.com

3

Malicious-Web-Content-Detection-Using-Machine-Learning. Chrome extension for detecting phishing web sites

3

pwnedOrNot. Python Script to Find Passwords for Compromised Email Accounts using haveibeenpwned API

2

king-phisher-plugins. Plugins for the King Phisher open source phishing campaign toolkit.

2

PhotoGIMP. A Patch for GIMP 2.10+ for Photoshop Users

2

FacebookIPLists. Hourly Checked and Updated if Facebook modifies their list

2

wpscan. WPScan is a black box WordPress vulnerability scanner.

2

dnstwist. Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

2

ngx_cache_purge. nginx module which adds ability to purge content from FastCGI, proxy, SCGI and uWSGI caches.

2

fail2ban-wiki. Fail2Ban Wiki Contributions

2

funceble. Simple and awesome script to check domains or IP accessibilities.

2

Badd-Boyz-Porn. Maintained list of porn sites mostly detected running referrer spam campaigns against your web site.

2

phish-collect. Python script to hunt phishing kits

2

black-mirror. Automatically compiled and maintained malicious domain & IP blacklist.

2

scripts. Scripts for servers, desktops, fun

2

Froxlor. The server administration software for your needs - The official Froxlor development Git repository

2

conda. OS-agnostic, system-level binary package manager and ecosystem

1

ComfyUI_examples. Examples of ComfyUI workflows

1

MISP. MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

1

CoinBlockerLists. Simple lists that can help prevent cryptomining in the browser or other applications.

1

Web-crawler-to-detect-malicious-websites. Implementation of a webcrawler, with a limited functionality detection for malicious websites

1

MetPy. MetPy is a collection of tools in Python for reading, visualizing and performing calculations with weather data.

1

linkchecker-1. check links in web documents or full websites

1

CryptoPaste. A secure, browser-side encrypted pastebin.

1

FairEmail. Fully featured, open source, privacy friendly email app for Android

1

creative-cloud-linux. PlayOnLinux install script for Adobe Creative Cloud

1

pihole-whitelists. These are my custom whitelists specific for various specific services. I should be adding them as I find them.

1

hosts. Extending and consolidating hosts files from several well-curated sources like adaway.org, mvps.org, malwaredomainlist.com, someonewhocares.org, and potentially others. You can optionally invoke extensions to block additional sites by category. SHALLOW CLONE to avoid cloning too much history.

1

shARP. An anti-ARP-spoofing application software that use active scanning method to detect and remove any ARP-spoofer from the network.

1

named-admin. Ruby command line application for zone file administration on Bind DNS servers

1

dotfiles. :neckbeard: arch linux configuration files

1

scripts-1. My daily sysadmin scripts

1

dead-hosts. A repo to lists result of #funceble against hosts lists

1