Tag Info

New answers tagged

0

If your intention is to gain assurance that no malicious alterations have been made to your script as part of a whitebox code security review you are looking for two things: Any monitoring of keyboard events Any reads from the DOM As mentioned elsewhere - ultimately someone will be trying to exfiltrate the data. At this point you are looking for: Any ...


2

A quick way I would assess a site would be to run a VM with a network monitor on and monitor what is being sent from the site (and to where). After all, an attacker somehow needs to collect those logged data points. If nothing shows up, I'd then go into the code itself. I'd use a javascript debugger and see exactly what functions were being fired when I ...



Top 50 recent answers are included