SWG Test Server v2

Generates structurally valid test files with EICAR embedded in proper format structures.

File Types

• PE32 - .exe/.dll/.scr with MZ/PE headers + EICAR in code section
• ELF - .elf with ELF header + EICAR in text segment
• PDF - valid PDF with EICAR in content stream
• RTF - valid RTF with EICAR in datastore
• OLE/CFB - .doc/.xls/.ppt with proper compound file structure
• OOXML - .docx/.xlsx/.pptx with proper ZIP/XML structure
• OOXML+VBA - .docm/.xlsm/.pptm with macro (AutoOpen + shell)
• Scripts - .ps1/.bat/.vbs/.js with suspicious-but-safe code patterns
• HTML - pages with suspicious JavaScript patterns
• Archives - .zip/.tar.gz with EICAR nested inside

Quick test

• /download/test.exe (PE32)
• /download/test.pdf (PDF)
• /download/test.docm (Word+VBA macro)
• /download/test.ps1 (PowerShell script)
• /download/test.zip (ZIP archive)

DLP exfiltration sink

POST synthetic sensitive data to /dlp (also /upload, /exfil). Returns 200 with a JSON receipt if the request was not blocked by an inline DLP control.