Nmap Development mailing list archives

http-unsafe-host.nse - Script to check if host is known for distributing malware or being used in phishing attacks

From: Paulino Calderon <paulino () calderonpale com>
Date: Mon, 04 Jul 2011 01:05:26 -0700

Hi nmap-dev,

I'm attaching 'http-unsafe-host.nse', feedback is welcomed. You can tryit against some malware infected sites fromhttp://www.malwareblacklist.com/showMDL.php


description = [[

http-unsafe-host checks if hosts are on Google's blacklist of suspectedmalware and phishing servers. These lists are constantly updated and arepart of Google's Safe Browsing service.

To use this script you need to have your own API key to access Google'sSafe Browsing Lookup services. Sign up for yours athttp://code.google.com/apis/safebrowsing/key_signup.html


* To learn more about Google's Safe Browsing:
http://code.google.com/apis/safebrowsing/

* To register and get your personal API key:
http://code.google.com/apis/safebrowsing/key_signup.html
]]
---
-- @usage
-- nmap -p80 --script http-unsafe-host <host>
--
-- @output
-- PORT   STATE SERVICE
-- 80/tcp open  http
-- |_http-unsafe-host.nse: Host is known for distributing malware.
--

-- @args http-unsafe-host.url URL to check. Default:<code>http/https</code>://<code>host</code>

---

Cheers.

--
Paulino Calderón Pale
Web: http://calderonpale.com
Twitter: http://www.twitter.com/paulinocaIderon

Attachment: http-unsafe-host.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/

Current thread:

http-unsafe-host.nse - Script to check if host is known for distributing malware or being used in phishing attacks Paulino Calderon (Jul 03)
- Re: http-unsafe-host.nse - Script to check if host is known for distributing malware or being used in phishing attacks Paulino Calderon (Jul 08)
  - Re: http-unsafe-host.nse - Script to check if host is known for distributing malware or being used in phishing attacks Henri Doreau (Jul 08)
    - Re: http-google-malware.nse - Script to check if host is known for distributing malware or being used in phishing attacks Paulino Calderon (Jul 08)
    - Re: http-google-malware.nse - Script to check if host is known for distributing malware or being used in phishing attacks Patrik Karlsson (Jul 08)
    - Re: http-google-malware.nse - Script to check if host is known for distributing malware or being used in phishing attacks Paulino Calderon (Jul 09)