Dr. Mine is a node script written to aid automatic detection of in-browser cryptojacking. The most accurate way to detect things that happen in a browser is via browser itself. Thus, Dr. Mine uses puppeteer to automate browser thingy and catches any requests to online cryptominers. When a request to any online cryptominers is detected, it flags the corresponding URL and cryptominer being in use. Therefore, however the code is written or obfuscated, Dr. Mine will catch it (as long as the miners are in the list). The list of online cryptominers are fetched from CoinBlockerLists. The result is also saved on file for later use.
- Can also process single URL passed directly via command line
- All links found on the first (requested) page are also processed, if same-origin
- All configurable options are stored in
config.jsallowing easier modifications - To reduce extra bandwidth and processing, all requests to resources like
fonts,images,media,stylesheetsare aborted
Pre-requisites & Installation
The following 3 lines of commands should set everything up and running on Arch distros;
pacman -S nodejs npm
git clone https://github.com/1lastBr3ath/drmine.git && cd drmine
npm i --save puppeteerhttps://nodejs.org/en/download/package-manager/
https://docs.npmjs.com/getting-started/installing-node
https://github.com/GoogleChrome/puppeteer#installation
Usage
Dr. Mine accepts either a URL or a file which is expected to contain valid URLs. Usage is as simple as;
node drmine.js list.txthttp://cm2.pw
http://cm2.pw/xmr/
https://example.com/node drmine.js http://cm2.pw/xmr/