Tag Archives: obfuscation

Text Decoder Toolkit

Posted on November 17, 2015 by darryl

Here’s a challenge for you, what does this decode to? T{4 G=C 9

Posted in Tools | Tagged , , , | Comments Off on Text Decoder Toolkit

Playing Hide and Seek with Malicious Scripts

Posted on July 7, 2012 by darryl

When I encounter a drive-by download that involves a compromised host, there will usually be a malicious script somewhere on the website. The “malicious script” could be a meta refresh tag, an iframe, an external Javascript file, or even in … Continue reading →

Posted in Malscript | Tagged , , , | 3 Comments

Javascript Deobfucation Tools (Part 2)

Posted on June 25, 2011 by darryl

In the previous article, I manually deobfuscated three malicious scripts. This time around, I’ll use publicly available tools to see which ones can tackle real-world obfuscated Javascript code. Here’s the criteria I used to select the tools: 1. Free 2. … Continue reading →

Posted in Malscript, Tools | Tagged , | 1 Comment

Javascript Deobfuscation Tools (Part 1)

Posted on June 17, 2011 by darryl

Deobfuscating Javascript can be tricky so why not make the job easier by using a tool? There’s several tools that can help you deobfuscate Javascript. Before I get to those tools, I wanted to show you how to deobfuscate them … Continue reading →

Posted in Malscript, Tools | Tagged , | 3 Comments

Black Hole Malvertisement Campaign

Posted on June 11, 2011 by darryl

There’s yet another malvertisement that leads to Black Hole. This campaign is affecting a fairly popular site. The malicious script is linked from many of the site’s pages. Here’s a shot of the webpage’s source code which shows the initial … Continue reading →

Posted in Exploit Packs, Malscript | Tagged , , , , | 1 Comment