Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 6 down vote favorite
2

I am wondering where I can find a good site with resources on reversing web malware like javascript, flash, html5, and any other stuff that is designed to attack the clients.

Does anyone have any good resources on this?

share|improve this question

2 Answers

up vote 1 down vote accepted

http://blog.armorize.com/ and http://blog.sucuri.net/ are good references for this kind of thing.

share|improve this answer
up vote 4 down vote

Check http://wepawet.iseclab.org/ is an online malware checker for URLs. It is worth reading their reports. A bit outdated but a good tool for hunting samples: http://malzilla.sourceforge.net/. Javascript deobfuscator: https://addons.mozilla.org/en-US/firefox/addon/javascript-deobfuscator/ and for a Javascript debugger look for Venkman or Firebug.

An online javascript "unpacker": http://jsunpack.jeek.org/dec/go and if you extract the shellcode you can emulate it on http://libemu.carnivore.it/

share|improve this answer
That's a good set of links. Speaking of JS obfuscation,you might also take a look at my OWASP talk about just that subject - slideshare.net/kkotowicz/owaspmaliciousjavascripten . I tried to describe various obfuscation techniques and ways that malware code could bypass detection by Jsunpack and other tools. – Krzysztof Kotowicz Sep 26 '11 at 23:52

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.