Stone-Red-Code / FraudCapturer

FraudCapturer is a Windows application that analyzes your PC's network traffic and blocks potential threats.

FraudCapturer

FraudCapturer is a Windows application that analyzes your PC's network traffic and blocks potential threats.

Usage

1. Download one of the releases.
2. Download and install nmap
3. (Not required but recommended) Get a proxycheck.io api key.
4. (Not required) Start FraudCapturer.exe and pass the config option to it to configure the blocking rules.
5. Start FraudCapturer.exe as administrator and pass the proxycheck api key to it if you have one.
6. Select the network device you want the program to listen to.

Additional information

1. Why do I need to install nmap?
   It is required because FraudCapturer uses it to monitor incoming and outgoing packets.
   FraudCapturer uses the sharppcap (license) library to communicate with nmap.

2. Does FraudCapturer send all packet contents to the APIs?
   No, only the required information (IP addresses/domains) and the PC name to identify the device are sent to the APIs.

3. How does FraudCapturer determine which IP addresses or domains are potential threats?
   It uses the proxycheck.io and Anti-Fish APIs.
   You can even add custom rules in the proxycheck.io API dashboard to block or allow certain IPs and providers

4. Why does FraudCapturer need administrator rights?
   FraudCapturer needs them because it uses the Windows firewall to block IP addresses.