Whitetrash – Dynamic Web White-listing for Squid

Keep on Guard!


This is a pretty neat tool for those using Squid Cache and looking for a pro-active tool for securing web acccess in their company (or house if you have a devious sibling).

The goal of Whitetrash is to provide a user-friendly and sysadmin-friendly proxy that makes it significantly harder for malware to use HTTP and SSL for:

  • initial compromise;
  • data exfiltration; and
  • command and control.

Whitetrash features:

  • Provides whitelisting for HTTP and SSL that is good for both users and sysadmins, but defends against malware and browser exploits.
  • A HTML rendered whitelist report that can be viewed by all users. Can also be used to generate static whitelists for popular domains.
  • Fast: no noticeable impact on users browsing urls already in the whitelist, and adding a new URL is very quick.
  • Secure: As this is a security product, great care has been taken to sanitise input, flow control etc. so that the whitelist cannot be easily circumvented or exploited.
  • Users can delete their own whitelist entries (optional). Admins can delete any whitelist entry. A HTML report that lists all domains requested but not whitelisted – good for tracking down malware/adware and generating static blacklists.
  • Configurable authentication: any sort of authentication can be used. Squid provides plugins for NTLM, basic, and digest but has an extensible interface for other authentication schemes.
  • NEW: A CAPTCHA system has been implemented to prevent malware adding itself to the whitelist. CAPTCHA can be enabled for HTTP, SSL, or both. This is available in the source tree and will be included in the next release.

Whitetrash whitelists web traffic at the domain level, and is a powerful technique to eliminate (or at least make difficult) communications for a lot of malware.

You can download Whitetrash here:

whitetrash 0.2RC1

Or read more here.

Posted in: Countermeasures, Security Software


Latest Posts:


OWASP ZSC - Obfuscated Code Generator Tool OWASP ZSC – Obfuscated Code Generator Tool
OWASP ZSC is an open source obfuscated code generator tool in Python which lets you generate customized shellcodes and convert scripts to an obfuscated script.
A Look Back At 2017 – Tools & News Highlights A Look Back At 2017 – Tools & News Highlights
So here we are in 2018, taking a look back at 2017, quite a year it was. Here is a quick rundown of some of the best hacking/security tools released in 2017, the biggest news stories and the 10 most viewed posts on Darknet as a bonus.
Spectre & Meltdown Checker - Vulnerability Mitigation Tool For Linux Spectre & Meltdown Checker – Vulnerability Mitigation Tool For Linux
Spectre & Meltdown Checker is a simple shell script to tell if your Linux installation is vulnerable against the 3 "speculative execution" CVEs that were made public early 2018.
Hijacker - Reaver For Android Wifi Hacker App Hijacker – Reaver For Android Wifi Hacker App
Hijacker is a native GUI which provides Reaver for Android along with Aircrack-ng, Airodump-ng and MDK3 making it a powerful Wifi hacker app.
Sublist3r - Fast Python Subdomain Enumeration Tool Sublist3r – Fast Python Subdomain Enumeration Tool
Sublist3r is a Python-based tool designed to enumerate subdomains of websites using OSINT. It helps penetration testers and bug hunters collect and gather subdomains for the domain they are targeting.
coWPAtty Download - Audit Pre-shared WPA Keys coWPAtty Download – Audit Pre-shared WPA Keys
coWPAtty is a C-based tool for running a brute-force dictionary attack against WPA-PSK and audit pre-shared WPA keys.


8 Responses to Whitetrash – Dynamic Web White-listing for Squid

  1. goodpeople December 28, 2007 at 8:39 am #

    Good work! This will certainly help.

  2. Pantagruel December 29, 2007 at 10:01 am #

    The squid was just added an extra ‘arm’, let’s see if it indeed caters the filtering needs.

  3. eM3rC January 6, 2008 at 9:55 pm #

    Great post! Like Pantagruel said, this is an extra arm.

  4. Sir Henry January 8, 2008 at 8:59 pm #

    Although this is not something that I will be implementing on my home network right now (I do not think the wife would be particularly pleased with having to justify where she goes on the web), I know that something of this sort will most certainly be in place when my son is old enough to try and maneuver the web. I like what I have seen with this, however.

  5. goodpeople January 8, 2008 at 10:23 pm #

    My son is 6 now and talks about games he plays online at a friends house. So I’m afraid I’ll be installing this very soon. For now I’m probably the only person in the world that isn’t running squid.

  6. Sir Henry January 8, 2008 at 10:53 pm #

    Actually, you are the second person in the world, for I am not running squid, either. ;)

  7. goodpeople January 9, 2008 at 12:12 am #

    hahaha, good to know that I’m not alone in this world.

    But all the fun stuff aside, does anyone have anything additional to say on the subject? I’m very interrested in other people opinions.

  8. eM3rC January 9, 2008 at 3:08 am #

    I wont be using it either, but I think stuff like this would be a helpful addition to small business networks or possibly schools (if they aren’t already using something like websense).