WindowsSpyBlocker is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems. The initial approach of this application is to capture and analyze network traffic based on a set of tools.
Configuration file app.conf
is generated at first launch :
Also Read Shodanwave – Tool For Exploring & Obtaining Information From Cameras
To capture and analyze network traffic for the telemetry option, QEMU virtual machines are used on the server virtualization management platform Proxmox VE based on :
Traffic dumps are clean every day and compared with the current rules to add / remove some hosts or firewall rules.
Tools used to capture traffic :
qemu -net dump
: captureThe data
folder contains the blocking rules based on domains or IPs detected during the capture process :
data/<type>/extra.txt
: Block third party applicationsdata/<type>/spy.txt
: Block Windows Spy / Telemetrydata/<type>/update.txt
: Block Windows UpdateFirewall and Hosts data are the main types. The others are generated from these as :
The cp command, short for "copy," is the main Linux utility for duplicating files and directories. Whether…
Introduction In digital investigations, images often hold more information than meets the eye. With the…
The cat command short for concatenate, It is a fast and versatile tool for viewing and merging…
What is a Port? A port in networking acts like a gateway that directs data…
The ls command is fundamental for anyone working with Linux. It’s used to display the files and…
The pwd (Print Working Directory) command is essential for navigating the Linux filesystem. It instantly shows your…