Skip to main content

A concept to a product (Kimidori [ 黄緑]) - Part 2

In the previous part, we have seen KIMIDORI [ 黄緑] detect if a URL is malicious. In this part, we will see the details that KIMIDORI [ 黄緑] fetches out of the URL provided.

As an example, provided a safe URL, https://www.azuresys.com/, and let's see what it brings out:


As we can see, the link is safe and the link is active, which means we can just click on the link to open it on IE.  Now it's time to look into the URL report (still under development): 





We have URLs IP, Location, and HTTP Status code. The Report part is a sliding window, the Show Report button shows as well as hides the report. Show / Hide Report is a toggle button.
Let's see if we get the same details for any bad (phishing / malicious) URL:

Took an URL example from a phishing link and tested it. The tool detected it as not a good link (Screen Shot Below) & link does not activate unlike a safe URL:



Now let's see the report part for more details including domain registration details:







It looks like it's a newly created short-living domain, possibly for a phishing attack. We will explore more features in the upcoming series (To be continued...).

























Comments

Popular posts from this blog

XOR (Exclusive OR) for branchless coding

The following example shows the array reversing using the  XOR operator . No need to take any additional variable to reverse the array.   int main(int argc, _TCHAR* argv[]) { char str[] = "I AM STUDENT"; int length = strlen(str); for(int i = 0; i < ((length/2)); i++) { str[i] ^= str[length - (1+i)]; str[length - (1+i)] ^= str[i]; str[i] ^= str[length - (1+i)]; } cout << str << endl; return 0; } The above example is one of the uses of XOR but XOR comes in handy when we can do branchless coding  methods like butterfly switch etc. Sometimes this is very effective in speeding up the execution.  Let's see one of the uses of XOR in branchless coding. I am taking a simple example of Y = | X |.  Yes, I am generating abs of a supplied number. So, my function signature/definition in C++ looks like below: int absoluteBranch( int x) {     if (x < 0 ) {         return ...

strcpy / strcmp implementation

 In C/C++ we have a library function called strcpy to copy the source character array to the destination character array. The C++ function details have been documented here . Today I tried to implement it in my own way. I have put forth a few conditions to implement this function, which are described below. 1. I don't want to pass the size of arrays as function parameters. I mean, the parameter gets passed implicitly 2. I don't want the program shall compile if any of the array sizes or both array sizes are zero or one. 3. There shall be no operation if source and destination arrays are the same. 4. No overflow happens if the destination array size is smaller than the source. 5. The destination array must be null-terminated after a successful copy. Below is the client code to test the implementation: int main() { // Case 1: Source and destination arrays are of the same size char src[] = "Hello World"; char dest[12] = {}; // n - 1 chars will be copied and the las...

Reversing char array without splitting the array to tokens

 I was reading about strdup, a C++ function and suddenly an idea came to my mind if this can be leveraged to aid in reversing a character array without splitting the array into words and reconstructing it again by placing spaces and removing trailing spaces. Again, I wanted an array to be passed as a function argument and an array size to be passed implicitly with the array to the function. Assumed, a well-formed char array has been passed into the function. No malformed array checking is done inside the function. So, the function signature and definition are like below: Below is the call from the client code to reverse the array without splitting tokens and reconstructing it. Finally, copy the reversed array to the destination.  For GNU C++, we should use strdup instead _strdup . On run, we get the following output: Demo code