Malice

Malice: Open Source Vulnerability Scanner and Malware Analysis Toolkit

Malice is an open source vulnerability scanner and malware analysis toolkit. It can scan for vulnerabilities in web applications and systems, as well as analyze suspicious files for potential malware.

What is Malice?

Malice is an open source vulnerability scanner and malware analysis toolkit created by MITRE. It brings together various open source tools that aid in the identification and analysis of malware, vulnerabilities, and other security issues.

As a vulnerability scanner, Malice can crawl websites and APIs to discover security flaws like SQL injection, cross-site scripting (XSS), insecure authentication, and more. It utilizes tools like nmap, Nikto, Arachni, and wpscan to find vulnerabilities. The scan results are presented in an easy to understand GUI web interface.

For malware analysis, Malice performs static, dynamic, and memory analysis on suspicious Windows executable files. It makes use of popular malware analysis tools such as PEframe, VirusTotal, Cuckoo Sandbox, and Volatility. These tools extract indicators of compromise from within the malware sample to identify threats. Malice presents the integrated report in its web interface for easy analysis.

Key features include:

• Web vulnerability scanning with Nikto, Arachni and more
• Malware analysis using PEframe, VirusTotal, Cuckoo and Volatility
• Customizable scans through a YAML configuration file
• Easy to use web interface for scan automation and report viewing
• Integrates with existing threat databases

With its blend of vulnerability assessment and malware analysis capabilities, Malice improves the efficiency of security operations teams. The open source tools it utilizes are highly flexible to suit both IT teams with limited resources as well as advanced security analysts.

Malice Features

Official Links