Safebrowsing Interstitial Web Server (in development) written in Go
The goal is the have a local web server that can be called by a SIEM as a workflow process, which would then call the sbserver to get an opinion on a URL. This was created because there are CORS issues with attempting to call the local SB server directly from the SIEM. This serves as an intermediary which would not have same CORS issue since both it and sbserver are running locally. This also avoids having to modify the sbserver to add CORS headers, or redirecting the analyst/user to a site that it thinks is SAFE but perhaps is not - SB just isn't aware of it (eek!).
SIEM --> sbiws --> sbserver --> [sb data]
./sbiws -p=[port number]
Note: port number used by sbiws must be different than port used by sbserver, since both are running on same host.
- Go
- Safebrowsing v4 sbserver running locally