New feature: detection of malicious code in blocks [XSS, SQL INJECTION, CSRF]


src

In the past few weeks I found some XSS vulnerabilities in some Hive tools.
After reporting them to witnesses and devs that maintained those apps, I decided it would be helpful to add to @keys-defender's list of weapons the ability to timely detect potential code injection attempts. This should mitigate the issue of attackers targeting the Hive ecosystem of apps and tools.


This bot now uses the following to try to detect potential malicious code published in blocks:

~300 fragments of code for XSS (Cross Site Scripting)

~50 fragments of code for SQL injections

~20 fragments of code for CSRF (Cross Site Request Forgery) ...

These dictionaries will grow in size and be adjusted based on false positives.

Logs of the new code injection detection feature


If the code injection is attempted in a post or comment (eg. this test comment of mine), the author will now receive an immediate reply from this bot:


Logs for code injection checks


Example of @keys-defender's reply


A notification is also immediately sent to my Discord server so that I or witnesses and volunteers in it can investigate and react accordingly to report and fix the targeted website or tool.

Clearly if a bad actor was indeed trying to compromise a website, their account name would also been known because, as per the blockchain design, past blocks cannot be edited or deleted.


Discord notification example



A whitelist is also in use so that known Hive apps devs like @louis88 won't be bothered while testing dapps for vulnerabilities.

My own code injection attempt ignored because I'm on the whitelist


Stay tuned for more updates and please feel free to suggest new features and improvements! 😎



Keys protection main features:
- Introductory post for @keys-defender launch
- Automatic-posts on leak detection, weekly reports


Other features:

- Phishing protection
- Re-posting detection



To support this bot..
- Delegation links:
10 HP 20 HP 30 HP 40 HP 50 HP
100 HP 200 HP 500 HP 1000 HP

- Curation trail
Follow @keys-defender's curation trail to upvote all its posts with a fixed vote weight. HOW: search "keys-defender" on Hive.Vote: https://hive.vote/dash.php?trail=keys-defender&i=1
H2
H3
H4
3 columns
2 columns
1 column
10 Comments