From b328ea2dc56a51b928381ba5991ba6803856af17 Mon Sep 17 00:00:00 2001 From: SystemJargon <24641464+SystemJargon@users.noreply.github.com> Date: Wed, 29 Nov 2023 10:47:19 +1300 Subject: [PATCH] new threat list for IDN homograph attack --- lists/threats/IDN_homograph_attack_agh.txt | 4 ++++ lists/threats/IDN_homograph_attack_agh_pi-hole.txt | 4 ++++ 2 files changed, 8 insertions(+) create mode 100644 lists/threats/IDN_homograph_attack_agh.txt create mode 100644 lists/threats/IDN_homograph_attack_agh_pi-hole.txt diff --git a/lists/threats/IDN_homograph_attack_agh.txt b/lists/threats/IDN_homograph_attack_agh.txt new file mode 100644 index 0000000..7256f6f --- /dev/null +++ b/lists/threats/IDN_homograph_attack_agh.txt @@ -0,0 +1,4 @@ +! Block common Cyrillic alphabet characters +! reference https://en.wikipedia.org/wiki/IDN_homograph_attack +||\.[асеорху]\.^ +||\.[АВСЕНКМОРТХ]\.^ \ No newline at end of file diff --git a/lists/threats/IDN_homograph_attack_agh_pi-hole.txt b/lists/threats/IDN_homograph_attack_agh_pi-hole.txt new file mode 100644 index 0000000..f63e46f --- /dev/null +++ b/lists/threats/IDN_homograph_attack_agh_pi-hole.txt @@ -0,0 +1,4 @@ +# Block common Cyrillic alphabet characters +# reference https://en.wikipedia.org/wiki/IDN_homograph_attack +.*[асеорху].* +.*[АВСЕНКМОРТХ].* \ No newline at end of file