Obfuscation refers to hiding the intended meaning of communication.
3
votes
4answers
201 views
Obfuscating JavaScript code
Some Flash developers are afraid of JavaScript. Their point of view:
Stealing JS source code is effortless, one would just 'view source' and copy it. Yes, you can decompile Flash bytecode, however it ...
12
votes
2answers
1k views
What does this injected code do?
One of my sites has just been hacked as this code has been inserted into random(?) files and places within the files.
Does anyone understand what it is trying to do? I would welcome anything that may ...
3
votes
3answers
213 views
Need help decoding suspicious Perl .cgi files
I found three (identical) .cgi files in the "cgi-bin" directory of a hacked website account. My knowledge of Perl is insufficient to decode them. I see some regexp with code execution, but I don't see ...
5
votes
3answers
522 views
Processor microcode manipulation to change opcodes?
I had recently thought of an extreme way of implementing security by obscurity and wanted to ask you guys if it's possible.
Would a person with no access to special processor documentation be able ...
1
vote
1answer
916 views
proxy services for torrents vs encrypting data
I've noticed growing popularity in proxy services for torrent clients; such as BTGuard. Most torrent clients encrypt traffic so aren't these services pointless? I read that it's because the encryption ...
2
votes
1answer
134 views
Lamp server sandbox for testing malicious php script
Fortunately despite recently becoming a full time web developer, security is something I take very seriously. There's a developer that I work with who's system was recently compromised with obfuscated ...
1
vote
0answers
79 views
The point which distinguish metamorphic and polymorphic algorithms? [closed]
I am writing a paper about malware and code obfuscation and I realize at the and these abstractions have not got a bordered definition and it is really hard to emphases the point between them, so I ...
4
votes
2answers
95 views
Is it actually feasible or useful to use a high number of proxy servers?
In the movies, it's not uncommon to see the digitized global map projected on a huge wall with a line of light (presumably a user's connection) travelling back and forth all over the globe in a ...
4
votes
1answer
277 views
Need help on understanding obfuscated code in CVE-2012-4969 exploit
As you may know this vulnerability was found a while ago in the wild and the exploit is available too, btw I'm having problem on understanding the obfuscated code.
Is it necessary to use obfuscation ...
6
votes
1answer
232 views
Reversible password storage obfuscation method for third-party login credentials
I have an internal business application, that as part of its functionality connects to a third-party app using login credentials specific to the user of my own app. These passwords are stored in a ...
2
votes
1answer
100 views
How to ensure web application remains secured after intrusion of server
My application employs asymmetric encryption / decryption, the process of how this work is detailed below:
Encryption - Server A
Data is encrypted using the public key of server B
Data is signed ...
4
votes
2answers
296 views
Canonicalization & Output Encoding
I'm reading OWASP's Secure Coding Practices Checklist and under their "Input Validation" section they have an item that reads:
If any potentially hazardous characters (<>"'%()&+\\'\") ...
8
votes
1answer
414 views
Why do attackers bother (trivially) obfuscating their source code?
A friend of mine recently discovered and sent me a small collection of trojan php scripts that were uploaded to his machine. Here's an example:
...
4
votes
2answers
141 views
How do I remove or anonymize file names and path that are stored in compiled .NET exe output?
When an exception occurs in a .NET application, the exception output also includes the path and file name of the code file that resided on the developer's machine. This shares some information that ...
4
votes
4answers
2k views
Reflector - obfuscated code
I run Reflector to de-compile some program and it seems to be obfuscated.
I got following output, it’s not very useful.
Any ideas how to decompile obfuscated code?
[CompilerGenerated]
get
...
