HTTP filter using WFP for Windows

andrewlin0215 · Jun 3, 2015

Hi there. I have a HTTP filter written in C ++ and implemented as a driver for Windows (WFP). Driver captures HTTP traffic before it sends to the browser. The driver is not detected by antivirus software as malware. Any ideas how I can make use of it? Any help would be useful. I consider any ideas, joint development...

andrewlin0215 · Jun 10, 2015

So, any ideas guys?

Fingerpod · Jun 10, 2015

I mean you could always sell it to the blackhat community and they'd make good use of it. Alternatively you could use it for yourself.

ChanzGrande · Jun 10, 2015

Maybe you can use it in conjunction with some sort of jingling setup to generate a virtually endless amount of web hits or something.

I'm not a coder, and appear to be lacking creativity on this one. I guess I just don't understand how this benefits you.

member8200 · Jun 12, 2015

Windows Filtering Platform (WFP) is a set of API and system services that provide a platform for creating network filtering applications. The WFP API allows developers to write code that interacts with the packet processing that takes place at several layers in the networking stack of the operating system. Network data can be filtered and also modified before it reaches its destination.
By providing a simpler development platform, WFP is designed to replace previous packet filtering technologies such as Transport Driver Interface (TDI) filters, Network Driver Interface Specification (NDIS) filters, and Winsock Layered Service Providers (LSP). Starting in Windows Server 2008 and Windows Vista, the firewall hook and the filter hook drivers are not available; applications that were using these drivers should use WFP instead.

bitm0de · Jun 13, 2015

member8200 said:
Windows Filtering Platform (WFP) is a set of API and system services that provide a platform for creating network filtering applications. The WFP API allows developers to write code that interacts with the packet processing that takes place at several layers in the networking stack of the operating system. Network data can be filtered and also modified before it reaches its destination.
By providing a simpler development platform, WFP is designed to replace previous packet filtering technologies such as Transport Driver Interface (TDI) filters, Network Driver Interface Specification (NDIS) filters, and Winsock Layered Service Providers (LSP). Starting in Windows Server 2008 and Windows Vista, the firewall hook and the filter hook drivers are not available; applications that were using these drivers should use WFP instead.

Nice copy and paste from MSDN.

andrewlin0215 · Jun 16, 2015

I don't mind to sell the source code. I think it will be preferable for now. I would like to find a nice solution, but it is difficult. ultimately any product should be profitable. Maybe i can make the possibility of placing ads on pages? What do you think?

iDeveloper · Sep 18, 2015

Can this filter modify content and send it to the browser? Does it work with HTTPS?

bretonel · Sep 24, 2015

Source code is worthless 99% just to sell.. you'll need to wrap it into something useful for someone.
"...not detected as malware... " ... yet. Just wait 4 hours after releasing it. You'll have to think about code-signing.

HTTP filter using WFP for Windows

andrewlin0215

Newbie

andrewlin0215

Newbie

Fingerpod

Regular Member

ChanzGrande

Elite Member

member8200

Regular Member

bitm0de

Newbie

andrewlin0215

Newbie

iDeveloper

Newbie

bretonel

Junior Member

Main Menu

Marketplace

Making Money

BlackHat World