AntiPhishingEngine.cpp

Go to the documentation of this file.

/*
 * BastionGuard™
 * Copyright (C) 2025–2026 Calogero Scarnà
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 * BastionGuard™ is a trademark of Calogero Scarnà.
 * The BastionGuard™ name and branding are not licensed under the GPL.
 */
 
#include "Resource.hpp"
#include "AntiPhishingEngine.hpp"
#include <iostream>
#include <fstream>
#include <regex>
#include <filesystem>
#include <chrono>
#include <thread>
#include <glib/gi18n.h>
 
AntiPhishingEngine::AntiPhishingEngine() : running_(false) {
    std::string path = resource("phishing/blacklist.txt");
    std::ifstream f(path);
 
    if (!f.is_open()) {
        std::cerr << "⚠ " << _("Impossibile aprire blacklist phishing: ") << path << "\n";
        return;
    }
 
    std::string url;
    while (std::getline(f, url)) {
        if (!url.empty()) blacklist_.push_back(url);
    }
    f.close();
 
    if (blacklist_.empty()) {
        std::cerr << "⚠ " << _("Blacklist phishing vuota o non caricata da ") << path << "\n";
    } else {
        std::cout << "✔ " << blacklist_.size() << " "
                  << _("voci caricate da blacklist phishing in ") << path << "\n";
    }
}
 
AntiPhishingEngine::~AntiPhishingEngine() {
    stop();
}
 
void AntiPhishingEngine::start() {
    if (running_) return;
    running_ = true;
    worker_ = std::thread(&AntiPhishingEngine::run, this);
}
 
void AntiPhishingEngine::stop() {
    running_ = false;
    if (worker_.joinable()) worker_.join();
}
 
bool AntiPhishingEngine::check_url(const std::string& url) {
    if (is_blacklisted(url)) {
        sig_event_.emit(_("⚠ URL in blacklist: ") + url);
        return true;
    }
    if (is_suspicious(url)) {
        sig_event_.emit(_("⚠ URL sospetto (phishing euristico): ") + url);
        return true;
    }
    return false;
}
 
bool AntiPhishingEngine::is_blacklisted(const std::string& url) {
    for (auto& bad : blacklist_) {
        if (url.find(bad) != std::string::npos) return true;
    }
    return false;
}
 
bool AntiPhishingEngine::is_suspicious(const std::string& url) {
    static const std::regex suspicious(R"((g00gle|faceb00k|paypa1|micros0ft))");
    return std::regex_search(url, suspicious);
}
 
void AntiPhishingEngine::run() {
    sig_event_.emit(_(">>> AntiPhishing avviato"));
    while (running_) {
        std::this_thread::sleep_for(std::chrono::seconds(30));
    }
    sig_event_.emit(_(">>> AntiPhishing fermato"));
}
 
sigc::signal<void(const std::string&)>& AntiPhishingEngine::signal_event() {
    return sig_event_;
}