Subkismet - Security Tools for .NET Developers

Commented Issue: Reset Method on CaptchaControl [9191]

assafl2003 — Thu, 22 Dec 2011 23:11:29 GMT

I couldn't find a way to make the CaptchaControl regenerate a new code after it has been successfully validated. Without a way to reset the captcha control you can't prevent a visitor from manually typing in the code once, and then submitting spam after the captcha control is validated.

Please add something like a public method on CaptchaControl that allows you to programmatically set the control to a non-validated state with a new code.
Comments: hope this is still a relevant issue to handle it would help to perform a reset of the control following a valid test I use it after an UpdatePanel callback thanks

Created Issue: GoogleSafeBrowsing: critical bug when removing existing keys [11372]

cmenet — Tue, 04 Oct 2011 09:25:09 GMT

In Synchronizer.cs, the Update method crashes if keys need to be removed.
Can't perform a "keys.Remove(key)" inside the foreach statement.
We could use an old style code instead:

for (int i = keys.Count - 1; i >= 0; i--)
{
Key key = keys[i];
if (key.Type == KeyType.Deletion)
{
DataProviderManager.Provider.RemoveKey(key.Value, listType);
keys.Remove(key);
}
}

Commented Feature: Update Google Safe Browsing API for Version 2.0 of API Specification [11371]

cmenet — Tue, 04 Oct 2011 08:28:36 GMT

Google has a new specification for Safe Browsing API that we have to adapt.
Comments: Any news about adapting to version 2.0? Google planed to stop API v1.0 on December, 31st 2011...

Commented Issue: Critical bug causes all calls to CheckLinks() in GoogleSafeBrowsing to be considered Safe [11367]

cmenet — Tue, 04 Oct 2011 08:15:21 GMT

In Synchronizer.cs CheckLinks() needs to compare the MD5 of the link to the Keys list. Currently compares URL string to MD5 hashes.

Incorrect Code:
foreach (string link in linksToCheck)
{
MD5 md5 = MD5.Create();

if (phishingKeys.Contains(link))
phishingResult++;
else if (malwareKeys.Contains(link))
malwareResult++;
}

Corrected Code:
foreach (string link in linksToCheck)
{
MD5 md5 = MD5.Create();

if (phishingKeys.Contains(GetMd5Hash(link)))
phishingResult++;
else if (malwareKeys.Contains(GetMd5Hash(link)))
malwareResult++;
}
Comments: In this case, you can also remove the following line inside the foreach: MD5 md5 = MD5.Create(); It's useless :)

Source code checked in, #3d59cbd35f61

Keyvan — Sat, 18 Jun 2011 23:48:55 GMT

Added RFC2396 for Google Safe Browsing API. Shared some stuff among components to avoid repetition.

Created Feature: Update Google Safe Browsing API for Version 2.0 of API Specification [11371]

Keyvan — Sat, 18 Jun 2011 23:47:17 GMT

Google has a new specification for Safe Browsing API that we have to adapt.

Closed Task: Add the Waegis library [11370]

Keyvan — Wed, 15 Jun 2011 02:45:35 GMT

Import the client library for interfacing with Waegis.
Comments: Imported. Closing.

Updated Release: Subkismet 1.0 (Jan 04, 2008)

keyvan — Wed, 15 Jun 2011 02:44:37 GMT

The first stable release of Subkismet which targets .NET Framework 2.0.

Read more about this version here:
http://nayyeri.net/subkismet-1-0-released

Released: Subkismet 1.0 (Jan 04, 2008)

Wed, 15 Jun 2011 02:44:37 GMT

The first stable release of Subkismet which targets .NET Framework 2.0.

Read more about this version here:
http://nayyeri.net/subkismet-1-0-released

Updated Wiki: Home

Keyvan — Wed, 15 Jun 2011 02:42:49 GMT

Description

A set of libraries, tools, and utilities for .NET developers to secure their applications including site spam filtering services, CAPTCHA controls, malware & phishing filter, and customizable password generator.

What is Included

There are six main components included (so far)

Waegis - A library for interfacing with the Waegis spam filter service implemented by Keyvan Nayyeri.
Akismet - A library for interfacing with the Akismet spam filter service implemented by Phil Haack.
InvisibleCaptcha - An invisible CAPTCHA validator control as first described and implemented by Phil Haack.
Captcha - A standard visible CAPTCHA control based on the work of Jeff Atwood.
Google Safe Browsing - .NET library to work with Google Safe Browsing Service as described and implemented by Keyvan Nayyeri.
Password Generator - A fully customizable random password generator for .NET done as described and implemented by Keyvan Nayyeri.

Applications

A part of this library for Akismet spam filter is based on code originally developed for the Subtext blog engine. A variant of the Akismet specific code is in use by DasBlog as well.

Latest Release

Get Subkismet 1.0!

Source code checked in, #302885e658f0

Keyvan — Wed, 15 Jun 2011 02:36:26 GMT

Imported Waegis library. Updated assemly information.

Created Task: Add the Waegis library [11370]

Keyvan — Wed, 15 Jun 2011 02:25:22 GMT

Import the client library for interfacing with Waegis.

Updated Wiki: Home

Keyvan — Wed, 15 Jun 2011 02:23:38 GMT

Project Description

What's Included

There are six main components included (so far)

Waegis - A library for interfacing with the Waegis spam filter service.
Akismet - A library for interfacing with the Akismet spam filter service.
InvisibleCaptcha - An invisible CAPTCHA validator control as first described by Phil Haack.
Captcha - Your standard visible CAPTCHA control based on the work of Jeff Atwood.
Google Safe Browsing - .NET library to work with Google Safe Browsing Service as described by Keyvan Nayyeri.
Password Generator - A fully customizable random password generator for .NET done as described by Keyvan Nayyeri.

Online Demo

Visit http://subkismet.com/ to see an online demo with example source code. This is a good place to start to see how to actually use Subkismet.

A part of this library for Akismet spam filter is based on code originally developed for the Subtext Blog Engine project (http://subtextproject.com/). A variant of the Akismet specific code is in use by DasBlog http://dasblog.info/ as well.

Latest Release

Get it HERE: Subkismet 1.0

Updated Wiki: Home

Keyvan — Mon, 23 May 2011 19:21:00 GMT

Project Description

What's Included

There are three main components included (so far)

Akismet - a class for interfacing with the Akismet service.
InvisibleCaptcha - An invisible CAPTCHA validator control as first described here: http://haacked.com/archive/2006/09/26/Lightweight_Invisible_CAPTCHA_Validator_Control.aspx
Captcha - Your standard visible CAPTCHA control based on the work of Jeff Atwood http://codinghorror.com/
Google Safe Browsing - .NET library to work with Google Safe Browsing Service done by Keyvan Nayyeri: http://www.nayyeri.net/blog/google-safe-browsing-library-for-net-beta-2
Password Generator - A fully customizable random password generator for .NET done by Keyvan Nayyeri http://www.nayyeri.net/fully-customizable-random-password-generator

Online Demo

Latest Release

Get it HERE: Subkismet 1.0

Closed Task: Reload the project in .NET 4.0 and VS 2010 [11368]

Keyvan — Sun, 22 May 2011 14:50:39 GMT

Now it's time to reload the project and upgrade to the latest bits of .NET and Visual Studio.
Comments: Done. Closing.

Closed Feature: Add Password Generator component [11369]

Keyvan — Sun, 22 May 2011 14:48:52 GMT

Add a fully customizable password generator component to the project.
Comments: Added. Closing.

Source code checked in, #1637047a5d75

Keyvan — Sun, 22 May 2011 14:03:37 GMT

Reloaded the project in VS 2010 and .NET 4.0 and added a Password Generator component. Subkismet 1.0 project is still available in a sub-folder.

Closed Feature: Add automatic update logic to Google Safe Browsing [9160]

Keyvan — Thu, 19 May 2011 12:35:26 GMT

That would be good to have a built-in mechanism for automatic updates of local black lists.
Comments: Closing.

Commented Feature: Add automatic update logic to Google Safe Browsing [9160]

Keyvan — Thu, 19 May 2011 12:34:57 GMT

That would be good to have a built-in mechanism for automatic updates of local black lists.
Comments: This doesn't seem relevant to the scope of this project/library. I think it's natural to leave the updating process to developers. You can use other open source projects like my Abidar (http://abidar.codeplex.com) library to accomplish this.

Edited Feature: Add automatic update logic to Google Safe Browsing [9160]

Keyvan — Thu, 19 May 2011 12:34:57 GMT

That would be good to have a built-in mechanism for automatic updates of local black lists.