The document discusses a web exploit finder tool that was developed by students to detect drive-by downloads on websites by using virtualized environments. The tool analyzes websites to inspect them for malicious exploits and has features like fast reproduction of virtual clients and a rootkit for analyzing infected environments. The presentation provides an overview of the problem of malicious websites, the architecture of the tool, and future plans for the tool.

1. Web Exploit Finder
Detecting Drive-By-Downloads
in a virtualized environment
Benjamin Mack
xnos Internet Services

2. About Benjamin Mack
 Student of „computer science and media“ at the Hochschule
der Medien, Stuttgart since 2003
 Started xnos Internet Services for
Hosting, Security and Web Development in 2006
 Finishing my diploma thesis in late 2007
 Also involved in TYPO3 core development
© Benjamin Mack, xnos Internet Services, www.xnos.de, June 1st 2007

3. Agenda
 The Problem
 What are malicious websites?
 Our Approach
 Features
 Architecture
 Rootkit
 Fast reproduction of virtual clients
 Inspecting a website
 State Future Plans
© Benjamin Mack, xnos Internet Services, www.xnos.de, June 1st 2007