WindowsSpyBlocker is an application written in Go and delivered as a single executable to block spying and tracking on Windows systems. The initial approach of this application is to capture and analyze network traffic based on a set of tools.
Configuration file app.conf is generated at first launch :
Also Read Shodanwave – Tool For Exploring & Obtaining Information From Cameras
To capture and analyze network traffic for the telemetry option, QEMU virtual machines are used on the server virtualization management platform Proxmox VE based on :
Traffic dumps are clean every day and compared with the current rules to add / remove some hosts or firewall rules.
Tools used to capture traffic :
qemu -net dump : captureThe data folder contains the blocking rules based on domains or IPs detected during the capture process :
data/<type>/extra.txt : Block third party applicationsdata/<type>/spy.txt : Block Windows Spy / Telemetrydata/<type>/update.txt : Block Windows UpdateFirewall and Hosts data are the main types. The others are generated from these as :
This cheat sheet covers the essential Kali Linux commands every pentester and ethical hacker uses…
When I first started learning malware analysis and reverse engineering, I thought the hardest part…
Both git fetch and git pull talk to a remote repository, but they do very different things to your…
Sometimes the change you need already exists, just on the wrong branch. A hotfix lands…
Email is still one of the most important communication channels inside modern applications. Password resets,…
Nginx is a high-performance web server and reverse proxy trusted by some of the largest…