Skip to content

Tag Archives: malware

Microsoft’s Zozzle, Javascript malware detector

In an effort to detect malicious Javascript code, Microsoft is developing a tool named Zozzle, aimed to be embedded into the Javascript engine of a browser. The authors claim that it is both fast and efficient with a very low rate of false positive. Here is the report for more details.

Posted 01 February 2011 § Defense § Security § Web ‡ Comments (0) ° Also tagged: , ,

Debugging the MBR with IDA Pro and Bochs

Analyzing the MBR is sometimes required during a forensic process, if you suspect a malicious activity that is not detected on-line. With static analysis, you may see if an obvious corruption happened, but you will need to debug to learn more. Prerequisite : IDA Pro (6.0) with the IDA Python plug-in (1.4.3) Steps : Prepare [...]

Posted 20 January 2011 § Assembler / Reversing § Malware forensics § Security ‡ Comments (6) ° Also tagged: , , , , , ,

Beware of source code (even from your favorite portal/forum/…)

The other day I stumbed upon a weired piece of software on howtoforge.com : dns-add (code on sourceforge.net). Actually, the purpose of dns-add was very intriguing : update your DNS in one command ! The output should look like this: Who would need it these days where all distros include tools and script to update [...]

Posted 24 April 2010 § Admin § Cryptography § Linux § Malware forensics § openSUSE § Security ‡ Comments (3) ° Also tagged: , , , , , , ,