Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Antivirus writers have agreed for their software to recognize a standard "fake" virus file - the EICAR file, to let users check, that the software is up and running.

Are there any equivalent test sites for trying out McAfee SiteAdvisor, Kaspersky URL Advisor, Norton Safe Web, Google Safe Browsing, and others?

Or can anyone share any running sites, which they use to test out whether their reputation services are working?

share|improve this question
add comment

3 Answers

Tests are typically done by finding a known malicious site and browsing to it while in a sandboxed environment. NSS labs used that technique for its recent tests this year, testing IE, Chrome, and Firefox. One of the sources of malicious URLs that NSS used was MalwareDomainList.com, which might serve as a something you could use in the same way, as long as you protect yourself.

I'm not sure how a fake malicious site would provide value, a la EICAR. I use EICAR to test AV avoidance and unique protection configurations, but the file is under your control and is readable. In that case, using Metasploit or SET might be a better way to test for browser protection because it is under your control and you know what it is doing, although you won't be able to test reputation services in the same way.

share|improve this answer
    
The value I think they would add is to do a sanity test that browser-plugin based or proxy server based malicious site blockers are working, without the risk of going to an actually known malicious site. –  HeyWatchThis Sep 2 '13 at 22:13
add comment

To my knowledge no such site exists.

You could maybe host a static webpage via github.io or something similar, and include some Javascript that's very similar to a known exploit kit's payload, just with the final eval replaced or removed. That would probably be the simplest way you could test.

share|improve this answer
1  
The problem with that is it might get blocked by the hoster. Hosting your own site gives you more control but you risk never being rated by a reputation service. –  schroeder Jun 13 '13 at 21:38
    
Ah, interesting, so your 'faux' malicious site will inevitably get crawled by a reputation service which will likely mark it as risky. And if your ISP or your co-lo gets wind, they will try to take you down. I suppose that is what should happen but it will make these "Reputation Service test sites" short lived or put YOU at risk of criminal intent. –  HeyWatchThis Sep 2 '13 at 22:17
add comment

http://wicar.org/

"The wicar.org website was designed to test the correct operation your anti-virus / anti-malware software."

"The wicar.org website contains actual browser exploits, therefore, regardless of search engine, web browser, filtering appliance or desktop anti-virus product you use, it should be marked as malicious."

(No connection, just used it myself).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.