I am wondering where I can find a good site with resources on reversing web malware like javascript, flash, html5, and any other stuff that is designed to attack the clients.
Does anyone have any good resources on this?
I am wondering where I can find a good site with resources on reversing web malware like javascript, flash, html5, and any other stuff that is designed to attack the clients.
Does anyone have any good resources on this?
Check http://wepawet.iseclab.org/ is an online malware checker for URLs. It is worth reading their reports. A bit outdated but a good tool for hunting samples: http://malzilla.sourceforge.net/. Javascript deobfuscator: https://addons.mozilla.org/en-US/firefox/addon/javascript-deobfuscator/ and for a Javascript debugger look for Venkman or Firebug.
An online javascript "unpacker": http://jsunpack.jeek.org/dec/go and if you extract the shellcode you can emulate it on http://libemu.carnivore.it/
http://blog.armorize.com/ and http://blog.sucuri.net/ are good references for this kind of thing.