Mot-clé - javascript

Fil des billets

mardi 6 mars 2007

Javascript traps for analysts

Here is a real nice article from Bojan Zdrnja I've just read, about some kind of new traps against javascript reversers.

I guess everyone reading this blog knows how to deobfuscate most of the actual used JS, but the article shows the malware coders are starting to take care of not being so easily reversed.
Personnaly (usually in hacking challenges) I'm mainly using the alert() méthod to deobfuscate parts of JS code, but it's true that it can become quite boring and tiringsometimes...
And to be honest, I didn't know Rhino, which I immediately apt-get'ed after reading this article ;-)