Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
57 commits
Select commit Hold shift + click to select a range
ef4b780
Create LICENSE
Binary-Assassin Dec 16, 2023
a068237
Update README.md
0xZainRaza Dec 16, 2023
1161b9c
Update README.md
0xZainRaza Dec 16, 2023
9f174cd
Update README.md
Binary-Assassin Dec 16, 2023
c6b18ee
Update README.md
Mercurycode2002 Dec 16, 2023
f1d3e3c
Update README.md
0xZainRaza Dec 16, 2023
a50f20d
Update README.md
Binary-Assassin Dec 17, 2023
10e9a44
Update README.md
Binary-Assassin Dec 17, 2023
6615bfd
Update README.md
Binary-Assassin Dec 17, 2023
5ad7e2b
Update README.md
Binary-Assassin Dec 20, 2023
d47a4e7
Update README.md
Binary-Assassin Dec 20, 2023
f272e28
Update README.md
Binary-Assassin Dec 20, 2023
0ad3bc8
Update README.md
Binary-Assassin Dec 20, 2023
eca3f5e
Update README.md
Binary-Assassin Dec 20, 2023
17bc01f
Update README.md
Binary-Assassin Dec 20, 2023
4ac6790
Update README.md
Binary-Assassin Dec 20, 2023
d916e29
Add files via upload
0xZainRaza Dec 20, 2023
48b9d8a
Update README.md
0xZainRaza Dec 20, 2023
dad2c74
Create static
0xZainRaza Dec 20, 2023
d3973fe
Add files via upload
0xZainRaza Dec 20, 2023
fe452eb
Delete static/static
0xZainRaza Dec 20, 2023
73958ca
Create files
0xZainRaza Dec 20, 2023
e5ad45e
Delete static/files/files
0xZainRaza Dec 20, 2023
0a8027a
Create uploaded
0xZainRaza Dec 20, 2023
3229ae6
Create in
0xZainRaza Dec 20, 2023
44d8bbf
Add files via upload
0xZainRaza Dec 20, 2023
86e18d3
Create tem
0xZainRaza Dec 20, 2023
b05e683
Add files via upload
0xZainRaza Dec 20, 2023
bbf0634
Delete templates/tem
0xZainRaza Dec 20, 2023
73f1033
Delete instance/in
0xZainRaza Dec 20, 2023
683aa79
Delete static/style3.css
0xZainRaza Dec 20, 2023
94a8a6e
Update README.md
0xZainRaza Dec 20, 2023
7023fec
Update README.md
Binary-Assassin Dec 20, 2023
c046cca
Update README.md
Binary-Assassin Dec 20, 2023
f770bc1
Update README.md
Binary-Assassin Dec 20, 2023
fc5219d
Update README.md
Binary-Assassin Dec 20, 2023
0542770
Update README.md
Binary-Assassin Dec 20, 2023
d8fb70e
Update README.md
Binary-Assassin Dec 20, 2023
b69cab0
Update README.md
Binary-Assassin Dec 20, 2023
07d3c4b
Update README.md
0xZainRaza Dec 20, 2023
658f573
Update README.md
0xZainRaza Dec 20, 2023
b349714
Update README.md
0xZainRaza Dec 20, 2023
9cb237a
Update README.md
0xZainRaza Dec 20, 2023
db9c3e5
Update README.md
0xZainRaza Dec 20, 2023
4bfd5cc
Update README.md
0xZainRaza Jan 7, 2024
949c38a
Update README.md
0xZainRaza Jan 8, 2024
12a9f91
Update README.md
0xZainRaza Jan 8, 2024
a195dc4
Update README.md
0xZainRaza Jan 8, 2024
506b537
Update README.md
0xZainRaza Jan 8, 2024
b25bbdf
Update README.md
0xZainRaza Jan 8, 2024
1272818
Update README.md
0xZainRaza Jan 8, 2024
58badac
Update README.md
0xZainRaza Jan 8, 2024
a6352af
Update README.md
0xZainRaza Jan 8, 2024
f766dde
Update README.md
0xZainRaza Jan 8, 2024
4bf5e4f
Update README.md
0xZainRaza Jan 8, 2024
e96b4b9
Update README.md
0xZainRaza Jan 8, 2024
a02a745
Update README.md
0xZainRaza Jan 8, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions LICENSE
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
MIT License

Copyright (c) 2023 Secure File Scan

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.
167 changes: 97 additions & 70 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,55 +1,77 @@
[![GitHub license](https://img.shields.io/github/license/creecros/simple_logo_gen.svg)](https://github.com/0xZainRaza/Secure-File-Scan/blob/main/LICENSE)
[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://github.com/0xZainRaza/Secure-File-Scan/graphs/contributors)



![secure_file_scan (3)](https://github.com/0xZainRaza/Secure-File-Scan/assets/98187755/8604fa41-14a0-4004-8f08-e0d18ee4af79)
![logo (3)](https://github.com/0xZainRaza/Secure-File-Scan/assets/98187755/dfbbd887-9b58-4b47-994a-887b90c82c25)






# Secure File Scan

Secure File Scan is a threat intelligence-based website that provides malware detection and analysis services. It includes a dedicated database for malware detection, API integration, and a reporting portal for malware researchers.


## Demo

Insert gif or link to demo


## Features

- **Malware Detection:** Scan uploaded files for malware using a comprehensive threat intelligence database.
- **Detailed Information:** Retrieve detailed information and YARA rules for identified malware.
- **API Integration:** Integrated Flask-based API and external malware analyzing APIs for enhanced research capabilities.
- **Malware Reporting Portal:** Allows malware researchers to report new malware to the database.
- **Real-time Dashboard:** Displays real-time information on recent cyber attacks, reported malware, IOCs, top countries in threat intelligence, and a pie chart showing the distribution of companies affected by phishing attacks.
- **Data Encryption:** Utilizes Blowfish encryption algorithm for secure data storage. Bcrypt is employed with a 128-bit salt and encrypts a 192-bit magic value, taking advantage of the expensive key setup in eksblowfish.

## API Reference

#### Get all items

```http
GET /api/items
```
https://github.com/0xZainRaza/Secure-File-Scan/assets/154006182/25f20a38-3d60-4952-9c5d-2a182ec3814b








| Parameter | Type | Description |
| :-------- | :------- | :------------------------- |
| `api_key` | `string` | **Required**. Your API key |

#### Get item

```http
GET /api/items/${id}
```

| Parameter | Type | Description |
| :-------- | :------- | :-------------------------------- |
| `id` | `string` | **Required**. Id of item to fetch |

#### add(num1, num2)

Takes two numbers and returns the sum.



## Overview

In the realm of cybersecurity, the proliferation of malware poses a constant threat to individuals and organizations alike. **Secure File Scan** steps in to alleviate this concern by offering a comprehensive and centralized solution for malware detection and research. The multifaceted approach taken by **Secure File Scan** addresses several critical aspects of cybersecurity:

1. **Efficient Detection:** The platform employs a sophisticated threat intelligence database, enabling swift and accurate detection of malware within uploaded files. This not only minimizes the risk of potential infections but also saves valuable time for users.

2. **Holistic Information Retrieval:** **Secure File Scan** goes beyond mere detection by providing users with detailed information and YARA rules for identified malware. This empowers cybersecurity professionals and researchers with the insights needed to understand the nature of threats and devise effective mitigation strategies.

3. **Seamless Multiple API Integration:** Through its integrated Flask-based API and external malware analyzing APIs, **Secure File Scan** enhances research capabilities. This integration ensures that users have access to a diverse set of tools and resources, fostering a more collaborative and informed cybersecurity community.

4. **Community-Driven Reporting Portal:** The inclusion of a reporting portal encourages active participation from malware researchers. By allowing them to report new malware to the database, **Secure File Scan** leverages collective intelligence to stay ahead of emerging threats, contributing to a more secure online environment.

By consolidating these features into a single platform, **Secure File Scan** eliminates the need for users to navigate disparate sources for malware analysis. This unified approach not only enhances the overall efficiency of cybersecurity efforts but also promotes a shared responsibility in combating the evolving landscape of cyber threats.

## Features

- **Malware Detection:** Scan uploaded files for malware using a comprehensive threat intelligence database.
- **Detailed Information:** Retrieve detailed information and YARA rules for identified malware.
- **YARA Rules Database:** Integrated YARA rule database that generates and adds new signatures using the YARA rule engine developed by Florian Roth
- **Multiple API Integration:** Integrated Flask-based API and external malware analyzing APIs for enhanced research capabilities.
- **Malware Reporting Portal:** Allows malware researchers to report new malware to the database.
- **Real-time Dashboard:** Displays real-time information on recent cyber attacks, reported malware, IOCs, top countries in threat intelligence, and a pie chart showing the distribution of companies affected by phishing attacks.
- **Data Encryption:** Utilizes Blowfish encryption algorithm for secure data storage. Bcrypt is employed with a 128-bit salt and encrypts a 192-bit magic value, taking advantage of the expensive key setup in eksblowfish.
- **Comprehensive Logs:** Utilizes Python logging to provide comprehensive insights into user interactions, potential threats, and system performance. Logs aid in security analysis and system optimization.
- **End-to-End Security:** Ensuring end-to-end security is paramount. SSL certificates encrypt data in transit, maintaining confidentiality and integrity, and fortifying the platform against potential threats and unauthorized access.


## Requirements

Ensure you have the following prerequisites installed:
Ensure you have Python3.10 or above along with these libraries:

#### Dependencies

- Python 3.10 or above
- Flask and its dependencies
- hashlib
- flask_sqlalchemy
Expand All @@ -62,74 +84,79 @@ Ensure you have the following prerequisites installed:
- subprocess
- logging

#### Install Dependencies
#### install

Install the required Python libraries using the following command:

pip install -r requirements.txt

OR

pip install flask flask_sqlalchemy flask_login flask_wtf wtforms flask_bcrypt werkzeug requests


## Acknowledgements

- [Awesome Readme Templates](https://awesomeopensource.com/project/elangosundar/awesome-README-templates)
- [Awesome README](https://github.com/matiassingers/awesome-readme)
- [How to write a Good readme](https://bulldogjob.com/news/449-how-to-write-a-good-readme-for-your-github-project)


## Problem Solved

Secure File Scan addresses the need for a centralized platform for malware detection and research. By combining a robust threat intelligence database, API integration, and a reporting portal, it streamlines the process for users, eliminating the need to visit multiple websites for malware analysis.
## Usage

To use the Secure File Scan project, follow these steps:

1. Clone the repository:

```bash
git clone https://github.com/your-username/secure-file-scan.git
git clone https://github.com/0xZainRaza/secure-file-scan.git
cd secure-file-scan
python app.py
## Authors
- [@Zain Ali Raza](https://www.linkedin.com/in/zain-ali-raza-7372b1219/)
- [@Sarim Muhammad khan](https://www.linkedin.com/in/sarim-mohammed-khan-65bb921a3/)
- [@Mehdi Badami](https://www.linkedin.com/in/mehdi-badami-bb1509258/)
- [@Moiz Ullah Siddiqui](https://www.linkedin.com/in/moiz-sid/)
## License

[MIT](https://choosealicense.com/licenses/mit/)

# API Reference

## VirusTotal API

#### Scan File for Malware

## References
Submit a file for scanning and get the analysis report.

1. VirusTotal API Documentation and references,
[VirusTotal API](https://docs.virustotal.com/reference/public-vs-premium-api)
```http
POST /api/virustotal/scan
```

| Parameter | Type | Description |
| :-------- | :------- | :------------------------- |
| `File` | `file` | **Required**. File to scan |

[FULL Documentation VirusTotal API](https://docs.virustotal.com/reference/post_files)

2. Malware Bazaar API Documentation and references,
[Malware Bazaar API](https://bazaar.abuse.ch/api/)

3. Color Psychology in UI Design,
[Color Psychology](www.example.com/color-psychology)
## Malware Bazaar API

4. Effective Information Presentation Strategies,
[Information Presentation Strategies](www.example.com/information-presentation)
*Get Recent Malware Samples*

5. User-Centric Design Principles,
[User-Centric Design Principles](www.example.com/user-centric-design)
Retrieve information on recent malware samples.

6. Python Logging Documentation,
[Python Logging](https://docs.python.org/3/library/logging.html)
```
GET /api/malwarebazaar/recent
```
| Parameter | Type | Description |
| :-------- | :------- | :------------------------- |
| `limit` | `integer` | Number of recent samples to retrieve. |
| `format` | `string` | Output format (json or text). |


[FULL Documentation malwarebazaar API](https://bazaar.abuse.ch/api/)

## Authors
- [Zain Ali Raza](https://www.linkedin.com/in/zain-ali-raza-7372b1219/)
- [Sarim Muhammad khan](https://www.linkedin.com/in/sarim-mohammed-khan-65bb921a3/)
- [Mehdi Badami](https://www.linkedin.com/in/mehdi-badami-bb1509258/)
- [Moiz Ullah Siddiqui](https://www.linkedin.com/in/moiz-sid/)


## References
1. VirusTotal API Documentation and references,
https://docs.virustotal.com/reference/public-vs-premium-api
2. Malware Bazaar API Documentation and references, https://bazaar.abuse.ch/api/

7. Operational Efficiency in Cybersecurity Platforms,
[Operational Efficiency](www.example.com/operational-efficiency-cybersecurity)
3. Python Logging Documentation,
https://docs.python.org/3/library/logging.html

8. SSL/TLS Overview,
[SSL/TLS Overview](www.example.com/ssl-tls-overview)
4. SSL/TLS Overview,
www.example.com/ssl-tls-overview

9. Florian Roth, the creator of Yara Rules,
[Florian Roth - Yara Rules](https://github.com/Neo23x0)
5. Florian Roth, the creator of Yara Rules,
https://github.com/Neo23x0
Loading