IDS mailing list archives

Re: malware scanning


From: "Jamie Riden" <jamie.riden () gmail com>
Date: Mon, 5 Jan 2009 18:00:36 +0000

2008/12/22  <sisram2 () gmail com>:
Is there any commercial / free tool to externally scan websites for malwares?

I agree with another poster, Capture HPC is a good, free tool for
doing this. It essentially visits the site using a high-interaction
honeypot and looks for state changes in the VM.

Are you wanting to do this for lots of sites? e.g. are you an admin
checking on sites their users visit, or just keeping an eye on a
couple of sites you visit/run to make sure everything's OK?

(I've not used FireEye's tool, so can't give you a comparison, sorry.)

cheers,
 Jamie
-- 
Jamie Riden / jamesr () europe com / jamie () honeynet org uk
http://www.ukhoneynet.org/members/jamie/

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------


Current thread: