I've just built a custom sandbox, and I'm happy with the way it processes samples that I upload directly. Now I'd like to work on "drive-by" browser exploits, but I'm not sure how to go about testing it. Is anyone aware of any public feed of URLs serving exploits/compromised sites?

  • Are you ask for sites that exploit unpatched 0-day attacks in browsers in them? Oct 21, 2015 at 4:18
  • 1
    For test purposes you could use Metasploit and an old outdated browser to connect to a web server running from within Metasploit that will send a malicious payload upon visiting.
    – Jeroen
    Oct 21, 2015 at 4:37
  • 2
    Compromised sites tend to get shut down. If you look through Exploit-db, you should find nice exploits that you could host yourself.
    – schroeder
    Oct 21, 2015 at 4:51


Browse other questions tagged .