Penetration Testing: Re: malware testing through proxy

[Javier Fernandez-Sanguino <jfernandez () germinus com>]

raimarm () gmail com dijo:
> Hi All,
> today some proxies can scan sites if they contain malware (keylogger,
> trojans, virues, drive-by-download, etc).
> In order to test and demonstrate the malware engines of our proxies I
> am looking for some good malware sites that can be tested through a
> proxy like bluecoat, Finjan or Ironport-s. I know the eicar.org site
> to test if a virus can be found. But I also look for sites which
> contain malware or code that looks like malware
> but it doesn't cause any harm, but is recognized as such.
Finjan has, unsurprisingly (as they are in that business) a place in
their website with tests with malware samples. You will find it at
http://www.finjan.com/Content.aspx?id=577

Most of the tests are IE-targeted, however.

Regards

Javier

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Security Trends Report from Cenzic
Stay Ahead of the Hacker Curve!
Get the latest Q2 2008 Trends Report now

www.cenzic.com/landing/trends-report
------------------------------------------------------------------------