Skip to content

littlebluepixel/whitetrash

 
 

Repository files navigation

Whitetrash - Dynamic Web Whitelisting for Squid

NOTE

This repository is a clone of the sourceforge repository, one day I hope to have time to do some work on this project

The goal of Whitetrash is to provide a user-friendly and sysadmin-friendly proxy that makes it significantly harder for malware to use HTTP and SSL for:

  • initial compromise;
  • data exfiltration; and
  • command and control.

Whitetrash implements a whitelisted web proxy as a Squid plugin.

Generally whitelisting is defined as having a default deny policy, and only allowing specific types of objects/packets/requests/strings/accounts - those that are known to be 'good'. Blacklisting is the opposite of this process where all types of objects/packets/requests/strings/accounts etc. are allowed by default, and only specifc 'bad' entities on the blacklist are denied.

Whitetrash whitelists web traffic at the domain level, and is a powerful technique to eliminate communications for a lot of malware.

See INSTALL.txt for installation instructions. Further documentation is available from http://whitetrash.sf.net

Contact the author at: gregsfdev@users.sourceforge.net

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • HTML 95.8%
  • Python 3.9%
  • Other 0.3%