tweedge / emerging-threats-pihole

Block malware on your network using your PiHole, using threat intelligence extracted from Emerging Threats rulesets.

Hi, I'm Chris 👋

I'm a security person in a software world. My focus is on bringing holistic and pragmatic security solutions to software companies, and I'm especially partial to risk-reducing solutions which improve development processes or developer experience (bingo!). I build guardrails, not tarpits.

Currently, I'm a Security Engineer Manager for Fabric Security @ Amazon as part of the Security Foundations organization. My notable past roles include:

• Security Engineer, Cloud Security @ Amazon
• Security Engineer, Vulnerability Management @ Luta Security on the Zoom contract
• Product Security Engineer @ Datto, and Software Engineer before that

I do security research across many topic in my spare time (read: whatever grabs my interest, little real theme), and either dump half- to fully-baked repos on GitHub or publish posts on my blog. If you'd like to chat or connect, you can find my social media and ways to message me on my contact page.

emerging-threats-pihole's Issues

Maintaining this list in AdGuard format in a fork

Hi, I appreciate the creation and idea of this blocklist. I was one of the first few people to recommend this list to Hagezi. I have forked this blocklist and am maintaining it with my own code to implement the ABP syntax to make use of wildcard matching in Pihole and AdGuard. I also automatically remove dead domains and redundant rules.

I initially just wanted to include the emerging-phishing rules in Jarelllama's Scam Blocklist but figured I might as well maintain the malware rules too.

The fork can be found here: https://github.com/jarelllama/emerging-threats-pihole

I have kept the original licenses in the repo and blocklist. If you dislike/disagree with any part of the fork, please do let me know.

Hosts/Domains should use 0.0.0.0 instead of 127.0.0.1 for Pi-hole

See https://discourse.pi-hole.net/t/use-0-0-0-0-instead-of-dns-ip-in-blocklists/5412 and StevenBlack/hosts#274 for "why". Thanks for changing (or do you prefer me seding this and make a PR?)!

translate.goog

This is a base domain of google's webpage translation url.

For example:

https://chris-partridge-tech.translate.goog/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en-US