Thanks for the reply,

i am also looking for a way to scan the URLs present in webpages for
phishing detection. I can not use firefox as i want to automate the process
of scanning by first download the website using httracker and then run my
custom program to scan the download webpages for URLs that lead to phishing
pages.

You mentioned that emails can be scanned for phishing detection, that means
if iam able to send the content of a webpage then clamav should scan the
page for anchors with phishing links. Iam writing an application in java for
which i need this integration, i am happy to integrate clamav code to
perform phishing detection.
pls let me know how to integrate (currenly i am scanning the download
webresources like doc, pdf for viru using clamav by streaming the file to
clamav), if phishing is not detected using SCAN/STREAM command then let me
know on how to integrate with native code (using clam av libraries)

thanks for your time


On 2009-12-09 18:13, Török Edwin wrote:

> On 2009-12-07 19:21, Sundara Kaku wrote:
> > Hi,
> >
> > I have a special requirement where  I want to scan downloaded pages from
> > website for phishing detection, ex: i use httracker to download a
website or
> > wget to download a particular website and i want scan that webpage for
> > phishing detection. I am using ClamAV 0.95.1/10117 i have the following
> > files under /var/lib/clamav folder
> >
> > main.cld
> > clamav-0980f9eff474c2c5b63601cd16a87374
> > daily.cld
> > safebrowsing.cld
>
> Safebrowsing is only used for links sent in emails. But since you are
> scanning webpages,
> firefox should already check the URL against safebrowsing db.
>
> > mirrors.dat
> >  the following are settings in clamd.conf
> >
> > PhishingSignatures true
> > PhishingScanURLs true
> > PhishingAlwaysBlockSSLMismatch false
> > PhishingAlwaysBlockCloak true
> >
>
> The heuristic phishing detector only works on html files inside mails,
> and most of the phishing signatures too.
>
> Right now there isn't any support for detecting a phishing website by
> scanning it, there is only support for detecting
> links to phishing websites in emails.
>
> Best regards,
> --Edwin
>
>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml

Reply via email to