Malicious Code is the term used to describe any code in any part of a software system or script that is intended to cause undesired effects, security breaches or damage to a system. Malicious Code is an application security threat that cannot be efficiently controlled by conventional antivirus software alone. Malicious Code describes a broad category of system security terms that includes attack scripts, viruses, worms, Trojan horses, backdoors, and malicious active content.
Malicious Code can take the form of:
- Java Applets
- ActiveX Controls
- Scripting languages
- Browser plug-ins
- Pushed content
Once inside your environment Malicious Code can enter network drives and propagate. Malicious Code can also cause network and mail server overload by sending email messages, stealing data and passwords, deleting document files, email files or passwords, and even re-formatting hard drives.
MALICIOUS CODE- SOFTWARE'S / TOOLS / UTILITIES
- Frameworks
- Malware Analysis
- Online Malware Analysis
- Online Identify Malicious Websites
- PDF Files
- Public Blocklists of Suspected Malicious IPs and URLs
- Sandboxes
- Website Malware Detection
- Shellcode Analysis
- Malheur
- Minibis
- ReFrameworker
- Yara
- ZeroWine
- Malware Classifier
- androguard
- pyew
- jsunpack-n
- Rootkit Profiler LX
- Exefilter
- Cuckoo Sandbox
- Capture BAT
- Anubis
- BitBlaze Malware Analysis Service
- Comodo Automated Analysis System
- CWSandbox
- EUREKA Malware Analysis Internet Service
- Joebox
- Norman SandBox
- ThreatExpert
- VirusTotal
- Xandora
ONLINE IDENTIFY MALICIOUS WEBSITES
- AVG Online Web Page Scanner
- Finjan URL Analysis
- Knownsec
- Malware Domain List
- McAfee Site Advisor
- McAfee Trusted Source
- Norton Safe Web
- ParetoLogic URL Clearing House
- PhishTank
- Secure Browsing Protection
- TrendMicro Web Repuation
- Unmask Parasites
- URL Blacklist
- vURL
- Webawet
- Web of Trust
- Jsunpack
- Origami
- PDFResurrect
- PDFStreamDumper
- Opaf
- Origapy
- pyPDF
- PDFMiner
- PDF Examiner
PUBLIC BLOCKLISTS OF SUSPECTED MALICIOUS IPS AND URLS
- BLADE Malicious URL Analysis
- CYMRU Bogon List
- DShield Blocklist
- DShield Highly Predictive Blacklist
- EmergingThreats Lists
- hpHosts File
- Malware Domain Blocklist
- MalwareDomainList.com Hosts List
- Malware Patrol's Malware Block Lists
- MalwareURL List
- PhishTank Phish Archive
- Project Honey Pot's Directory of Malicious IPs
- Shadowserver IP and URL Reports
- Sucuri Blacklists
- ZeuS Tracker Blocklist
- Sydbox
- iScanner
- libemu
- Shellcode2Exe
- scdbg (libemu - emulation)
- sclog (iDefense - runs live)
- Hook Analyser Malware
CORE Impact Professional is the most comprehensive software solution for assessing and testing security vulnerabilities throughout your organization.
IBM Rational AppScan Enterprise is a scalable solution to help resolve application security vulnerabilities, offering recommendations to simplify remediation.
HP WebInspect gives security professionals and security novices alike the power and knowledge to quickly identify and validate critical, high-risk security vulnerabilities.
Acunetix Web Vulnerability Scanner (WVS) is an automated web application security testing tool that audits web applications by checking for hacking vulnerabilities.