본문 바로가기
Tools

[분석툴]The Tools(Online Tools - Monday, November 29, 2010 - Updated)

by 잡다한 처리 2010. 12. 3.
반응형


The online tools contains an updated list of online resources that can be used to help determine when a file is malicious or if website contains suspicious activity.


Anubis - “Anubis is a service for analyzing malware.”

http://anubis.iseclab.org/


Bitblaze -Online Unpacker

https://aerie.cs.berkeley.edu/submitsample.php


Eureka - Sandbox

http://eureka.cyber-ta.org/


Comodo - “If you have a suspicious file, please submit it online by using the form below. Once the file is submitted, COMODO Automated Analysis System will scan it and report back its findings.”

http://camas.comodo.com/


IPVoid - “...allows users to scan an IP Address with multiple scanning services to facilitate the detection of IP Addresses that have committed malicious activity and to check if a website is hosted in a compromised server, used for spam, phishing or to host malicious content.”

http://www.ipvoid.com


Joebox  - Sandbox

http://www.joebox.org/samples.php


McAfee SiteAdvisor - “We test websites for spyware, spam and scams so you can search, surf and shop more safely.”

http://www.siteadvisor.com


Norman SandBox - "Free uploads of program files that you suspect are malicious or infected by malicious components, and instant analysis by Norman SandBox. The result is also sent you by email."

http://www.norman.com/security_center/security_tools/submit_file/


Sunbelt CWSandbox - "CWSandbox is an approach to automatically analyze malware which is based on behavior analysis: malware samples are executed for a finite time in a simulated environment, where all system calls are closely monitored."

http://mwanalysis.org/


ThreatExpert - “ThreatExpert is an advanced automated threat analysis system designed to analyze and report the behavior of computer viruses, worms, trojans, adware, spyware, and other security-related risks in a fully automated mode.”

http://www.threatexpert.com/submit.aspx


URLVoid -  “allows users to scan a website address with multiple scanning engines such as Google Diagnostic, McAfee SiteAdvisor, Norton SafeWeb, MyWOT to facilitate the detection of possible dangerous websites.”

http://www.urlvoid.com/


VirusTotal - Send a file and see the detection according the AV vendors.

http://www.virustotal.com\


Wepawet - "Wepawet is a service for detecting and analyzing web-based malware. It currently handles Flash, JavaScript, and PDF files."

http://wepawet.iseclab.org/








댓글