Mitchell Krog

nginx-ultimate-bad-bot-blocker. Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders

apache-ultimate-bad-bot-blocker. Apache Block Bad Bots, (Referer) Spam Referrer Blocker, Vulnerability Scanners, Malware, Adware, Ransomware, Malicious Sites, Wordpress Theme Detectors and Fail2Ban Jail for Repeat Offenders

The-Big-List-of-Hacked-Malware-Web-Sites. This repository contains a list of all web sites I come across that are either hacked with or purposefully hosting malware, ransomware, viruses or trojans.

Fail2Ban.WebExploits. This custom Fail2Ban filter and jail will deal with all scans for common Wordpress, Joomla and other Web Exploits being scanned for by automated bots and those seeking to find exploitable web sites.

Fail2Ban-Blacklist-JAIL-for-Repeat-Offenders-with-Perma-Extended-Banning. A customised jail with action and filter file for Fail2Ban. This jail is based on the recidive jail but makes use of a simple text file to enable extended and permanent bans.

Badd-Boyz-Hosts. A hosts file for use on any operating system to block bad domains out of your servers or devices.

linux-server-administration-scripts. Simple bash administration scripts for Linux to make your life easier.

fail2ban-useful-scripts. A collection of useful scripts for automation of & easing maintenance of Fail2Ban

Suspicious.Snooping.Sniffing.Hacking.IP.Addresses. A daily updated list of suspicious, snooping, sniffing and hacking attempts from IP addresses against services like SSH, HTTP and Wordpress Hack Attempts

Stop.Google.Analytics.Ghost.Spam.HOWTO. How to stop Google Analytics "Ghost" Spam using a well curated list of spam referrer domains and web sites. Simple and easy to use with instructions for creating Segments in Google Analytics using our google-exclude files.

Badd-Boyz-Bitcoin-Scammers. A list of bitcoin addresses being used in Ransomware and Sextortion Scams

Travis-CI-for-Apache-For-Testing-Apache-and-PHP-Configurations. How to get Travis CI to test Apache code including vhosts and custom apache code like .htaccess rules or other scripts you have written and need to test using Travis CI's build checker.

Travis-CI-Nginx-for-Testing-Nginx-Configuration. How to get Travis CI to test Nginx code including nginx.conf, vhosts and custom nginx code you have written and need to test using Travis CI's build checker.

Top-Attacking-IP-Addresses-Against-Wordpress-Sites. Lists of the top attacking IP addresses trying to hack or compromise Wordpress web sites.

Global-List-Facebook-Groups-Keyword-Moderation-Alerts. The Global List of Facebook Groups Keywords for Moderation Alerts

nginx-badbot-blocker. Block bad, possibly even malicious web crawlers (automated bots) using Nginx

AjaxForm-PHPMailer-reCAPTCHA. Simple form using Ajax, validations, SMTP and reCAPTCHA v3 for PHP.

awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources

My-Gray-Hacker-Resources. Useful for CTFs, wargames, pentesting. Educational purposes.

webscreenshot. A simple script to screenshot a list of websites

phisherman. Extensible open source phishing incident response automation

Swift-Keylogger. Keylogger for mac written in Swift using HID

miteru. An experimental phishing kit detection tool

Badips.com-Hosts-File-Generator. A simple shell script to pull a daily list of known bad hosts from badips.com and create an /etc/hosts.deny file for you. Only hosts with a level 5 (bad) are pulled daily from badips.com

Malicious-Web-Content-Detection-Using-Machine-Learning. Chrome extension for detecting phishing web sites

pwnedOrNot. Python Script to Find Passwords for Compromised Email Accounts using haveibeenpwned API

king-phisher-plugins. Plugins for the King Phisher open source phishing campaign toolkit.

PhotoGIMP. A Patch for GIMP 2.10+ for Photoshop Users

FacebookIPLists. Hourly Checked and Updated if Facebook modifies their list

wpscan. WPScan is a black box WordPress vulnerability scanner.

dnstwist. Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

ngx_cache_purge. nginx module which adds ability to purge content from FastCGI, proxy, SCGI and uWSGI caches.

fail2ban-wiki. Fail2Ban Wiki Contributions

funceble. Simple and awesome script to check domains or IP accessibilities.

Badd-Boyz-Porn. Maintained list of porn sites mostly detected running referrer spam campaigns against your web site.

phish-collect. Python script to hunt phishing kits

black-mirror. Automatically compiled and maintained malicious domain & IP blacklist.

scripts. Scripts for servers, desktops, fun

Froxlor. The server administration software for your needs - The official Froxlor development Git repository

conda. OS-agnostic, system-level binary package manager and ecosystem

ComfyUI_examples. Examples of ComfyUI workflows

MISP. MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

CoinBlockerLists. Simple lists that can help prevent cryptomining in the browser or other applications.

Web-crawler-to-detect-malicious-websites. Implementation of a webcrawler, with a limited functionality detection for malicious websites

MetPy. MetPy is a collection of tools in Python for reading, visualizing and performing calculations with weather data.

linkchecker-1. check links in web documents or full websites

CryptoPaste. A secure, browser-side encrypted pastebin.

FairEmail. Fully featured, open source, privacy friendly email app for Android

creative-cloud-linux. PlayOnLinux install script for Adobe Creative Cloud

pihole-whitelists. These are my custom whitelists specific for various specific services. I should be adding them as I find them.

hosts. Extending and consolidating hosts files from several well-curated sources like adaway.org, mvps.org, malwaredomainlist.com, someonewhocares.org, and potentially others. You can optionally invoke extensions to block additional sites by category. SHALLOW CLONE to avoid cloning too much history.

shARP. An anti-ARP-spoofing application software that use active scanning method to detect and remove any ARP-spoofer from the network.

named-admin. Ruby command line application for zone file administration on Bind DNS servers

dotfiles. :neckbeard: arch linux configuration files

scripts-1. My daily sysadmin scripts

dead-hosts. A repo to lists result of #funceble against hosts lists