Penetration Testing mailing list archives

Re: malware testing through proxy


From: "Adriel T. Desautels" <ad_lists () netragard com>
Date: Wed, 3 Dec 2008 09:41:17 -0500

Raimar,
Something you should understand is that these technologies can only detect what it is that they are designed to detect. New methods of infection that match no known patters or detection methods will still go undetected. Just my two cents. ;]


On Dec 2, 2008, at 12:18 PM, raimarm () gmail com wrote:

Hi All,
today some proxies can scan sites if they contain malware (keylogger,
trojans, virues, drive-by-download, etc).
In order to test and demonstrate the malware engines of our proxies I
am looking for some good malware sites that can be tested through a
proxy like bluecoat, Finjan or Ironport-s. I know the eicar.org site
to test if a virus can be found. But I also look for sites which
contain malware or code that looks like malware
but it doesn't cause any harm, but is recognized as such.
Many thanks in advance for your replies.
Cheers
Raimar

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------


Adriel T. Desautels
ad_lists () netragard com




------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------


Current thread: