Magnifirewall

• 

  The main UI

Inspiration

The best way to spot hackers is to watch their network behavior. I wanted to make this accessible to more people.

What it does

Magnifirewall plugs into almost any router, and starts analyzing network traffic. Malicious traffic is identified, and sent directly to a webpage, where clients can see and resolve network threats in real time.

How we built it

Magnifirewall works using custom, linux-based router firmware that allows one of the router's ports to act as a mirror of all traffic. This traffic is analyzed using a deep packet inspection engine

Challenges we ran into

• In the process of finding and installing suitable firmware for traffic analysis, our router was completely bricked and had to be recovered multiple times
• Many of our team members fell ill during the hackathon.

Accomplishments that we're proud of

• Getting a router set up with a stable connection and a reliable traffic tap
• Our main backend developer learned enough angular in a night to finish up the project, despite never having touched javascript.

What we learned

• Just because something is completely bricked, doesn't mean it can't be fixed with a little ingenuity

What's next for Magnifirewall

• More traffic analytics, include some non-cybersecurity ones
• Client hardware and OS identification with passive fingerprinting
• API integration for data enhancement

Built With

• angular.js
• blood
• bro
• dd-wrt
• express.js
• iptables
• linux
• mongodb
• node.js
• openwrt
• python
• sweat
• tears