Skip to content

A sophisticated browser extension that provides real-time protection against phishing websites and malicious URLs with comprehensive analysis and blocking capabilities.

Notifications You must be signed in to change notification settings

TeoDev1611/fisherman

Repository files navigation

🎣 Fisherman - Advanced Anti-Phishing Protection

A sophisticated browser extension that provides real-time protection against phishing websites and malicious URLs with comprehensive analysis and blocking capabilities.

✨ Features

  • 🔍 Real-time Detection: Analyzes URLs and page content as you browse
  • 📊 Updatable Database: Malicious domain database can be updated from reliable sources
  • 🎯 Heuristic Analysis: Detects suspicious patterns and domain similarities
  • 📈 Intuitive Interface: Clearly displays risk levels with visual indicators
  • ⚡ Proactive Protection: Blocks dangerous sites before they load
  • 📝 Content Analysis: Examines page text, forms, and links for phishing indicators
  • 🔔 Smart Notifications: Alerts you about potential threats without being intrusive

🛠️ Installation

  1. Clone or download the extension files
  2. Open Chrome/Edge and navigate to chrome://extensions/
  3. Enable "Developer mode" (toggle in top-right corner)
  4. Click "Load unpacked" and select the extension folder
  5. The Fisherman icon should appear in your toolbar

📖 Usage

Automatic Protection

  • The extension works automatically in the background
  • The icon will show a badge (! or ?) when suspicious sites are detected
  • Red badge: Confirmed phishing site
  • Orange badge: Potentially suspicious site
  • No badge: Site appears safe

Manual Controls

  • Click the extension icon to view current page analysis
  • Use the popup to:
    • View detailed security assessment
    • Report false positives/negatives
    • Whitelist trusted sites
    • Manually update the phishing database

Database Management

  • Access the database manager via the "Update Database" button
  • Import custom domain lists (text format, one domain per line)
  • Load sample data to test the functionality
  • Drag-and-drop support for domain list files

📁 File Structure

fisherman-extension/
├── background.js          # Core logic and phishing detector
├── content.js            # Real-time content analysis
├── popup.html            # Main popup interface
├── popup.js              # Popup functionality
├── update-db.html        # Database management interface
├── update-db.js          # Database update logic
├── rules.json            # Network blocking rules
├── manifest.json         # Extension configuration
├── icon.svg              # Extension logo
└── icons/                # Extension icons in various sizes

🚀 Roadmap

Upcoming Features

  • Cloud Synchronization: Sync your whitelist and settings across devices
  • Enhanced Reporting: Detailed phishing reports with screenshot capability
  • Community Database: Crowdsourced phishing domain reporting
  • Advanced Machine Learning: Improved detection using AI models

Performance Optimizations

  • Storage Efficiency: Address the "QuotaBytes Exceeded" error by implementing:
    • Data compression algorithms for domain storage
    • Regular cleanup of outdated entries
    • Smart caching mechanisms with automatic expiration
    • Chunked storage for large domain lists

Platform Expansion

  • Firefox Version: Full compatibility with Mozilla Firefox
  • Mobile Support: Protection for mobile browsers
  • Enterprise Edition: Centralized management for organizations

🔧 Customization

You can extend Fisherman's detection capabilities by:

  1. Adding custom patterns to PHISHING_PATTERNS in background.js
  2. Importing specialized domain lists through the database manager
  3. Adjusting sensitivity thresholds in the analysis algorithms

🐛 Troubleshooting

Common Issues

  1. "QuotaBytes Exceeded" Error

    • Solution: The extension is working on improved storage efficiency
    • Workaround: Clear extension data and update to a smaller domain list
  2. Performance Impact

    • Solution: Content scripts are optimized to minimize resource usage
    • Monitoring: Check the background process CPU usage in browser task manager
  3. False Positives

    • Solution: Use the whitelist feature for trusted sites
    • Report: Help improve the database by reporting false positives

📊 Technical Details

Detection Methods

  • Exact domain matching against known phishing databases
  • Pattern recognition for suspicious URL structures
  • Heuristic analysis of page content and forms
  • Visual similarity detection for impersonation attacks

Privacy Policy

Fisherman respects your privacy:

  • No personal data is collected or transmitted
  • URL checking happens locally when possible
  • Optional reporting sends only domain information, not personal data

📄 License

This project is licensed under the MIT License. Feel free to use, modify, and distribute with proper attribution.

🤝 Contributing

Contributions are welcome! Please feel free to:

  • Submit bug reports and feature requests
  • Send pull requests for improvements
  • Help translate the interface to other languages
  • Improve the detection algorithms

⚠️ Disclaimer

Fisherman is a preventive security tool but does not guarantee absolute protection against all phishing sites. Always practice safe browsing habits and use additional security measures for comprehensive protection.


Note: For optimal performance, keep your phishing database updated and report any false positives to help improve the detection system.

About

A sophisticated browser extension that provides real-time protection against phishing websites and malicious URLs with comprehensive analysis and blocking capabilities.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published