Hi, As you mentioned "clamav would scan the mail".. means..can i add downloaded webpage as attachment to email with (javamail api) and save that mail as eml file and send this file for scanning..
is this practically possible, does clamav scans html attachments for phishing links and malicious javascript 2009/12/10 Török Edwin <[email protected]> > On 2009-12-10 13:06, Sundara Kaku wrote: > > Thanks for the reply, > > > > i am also looking for a way to scan the URLs present in webpages for > > phishing detection. > > > To scan URLs for phishing and malware links you can query google's > safebrowsing DB yourself. I know there is perl module, there must surely > be a java library to deal with it. > > > > I can not use firefox as i want to automate the process of scanning by > > first download the website using httracker and then run my custom > > program to scan the download webpages for URLs that lead to phishing > > pages. > > > > You mentioned that emails can be scanned for phishing detection, that > > means if iam able to send the content of a webpage then clamav should > > scan the page for anchors with phishing links. > > > That seems like a very inefficient workaround: clamav would scan the > mail, the html with all signatures (type 3 and 4), while you only care > about the URL, > which could be done much more efficiently by quering a database with URLs. > Sure, you may want to scan the HTML for malicious javascript anyway, so > in that case it might make sense to encapsulate in a mail and scan that. > > However if all you want is detect phishing, the heuristic phishing > detection won't work with webpages, it is designed for phishing mails > (which are different than the phishing websites themselves). > The only detection you can gain are the Email.Phishing.*.RB signatures, > and the safebrowsing DB (which you can query by other means). > > > Iam writing an application in java for which i need this integration, > > i am happy to integrate clamav code to perform phishing detection. > > pls let me know how to integrate (currenly i am scanning the download > > webresources like doc, pdf for viru using clamav by streaming the file > > to clamav), if phishing is not detected using SCAN/STREAM command then > > let me know on how to integrate with native code (using clam av > libraries) > > There is no support in the public libclamav APIs either for this, just > send the file you want scanned to clamd. > > Best regards, > --Edwin > -- Thanks & Regards, Sundara Kaku +91 9963990101 Mobile +91 40 23314848 Work India iCore Innovations Pvt Ltd #405 Pavani Plaza, Khairatabad Main Road Hyderabad - 500004 _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
