Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dynamic-analysis]

The tag has no usage guidance.

-1
votes
0answers
41 views

How to get interesting Malware samples for a demo? [duplicate]

I have to show a demo on Cuckoo Sandbox front of a class for module assignment. Is there a website or repository to download Malware samples that show interesting behaviors. I thought if I could make ...
1
vote
2answers
87 views

Fuzzing versus Symbolic Execution — what's the difference?

Fuzzing, per a current Wikipedia definition is defined the following way: Fuzzing or fuzz testing is an automated software testing technique that involves providing invalid, unexpected, or random ...
1
vote
1answer
72 views

Malware Execution Delay

I am new to malware analysis and am currently using Cuckoo to understand some of the basics. I am trying to figure the time that the malware delays its initial executions. I found a functional call ...
4
votes
2answers
176 views

Can results from DAST (Dynamic Application Security Testing) tools be false positive?

I know results from Static Application Security Testing (SAST) can be false positives or real and it is up to the security analyst and developer to decide which vulnerability is real based on the ...
2
votes
1answer
90 views

What is the relationship between HTTP response codes and successful execution of XSS attacks?

What is the relationship between HTTP response codes and successful execution of XSS attacks? For e.g I am using a commercial vulnerability scanner that reports XSS vulnerability found in a certain ...
1
vote
1answer
217 views

Extract urls from obfuscated android malware

Working on android malwares, i have faced many android malwares that typically contain urls which are bank phishing page. This type of malwares are growing in number so an automated detection system ...
0
votes
0answers
27 views

Zed Attack Proxy: enumerating dynamic contents and associated parameters

After the initial information gathering phase, it is possible in ZAP to export or list any dynamic content and the respective parameters in a structured way, i.e., excluding the any static content (...
2
votes
1answer
153 views

Is it possible to make my host completely safe from the virtual machine (where I will do malware analysis)?

I am using Windows 10 Home edition (Fall creators update), 750 GB HDD. I use Oracle VirtualBox, and I have two virtual machines there: Windows 7 (32 bit) and Ubuntu 14.04.5. I will do malware-analysis ...