Javascript 虚拟执行引擎近期小结

近期在做Javascript的虚拟执行引擎,V8的一个最小环境已经做好了,编译起来方便多了。

下面是一段把ActiveX的clsid分开书写的例子。这种分开书写的网页木马,让大量的IDS与IPS
 
的签名头疼,以Snort来说,就有千余条的WEB-CLIENT的规则失效。
 
 
 
 
 
 
 
 
 
 
下面是整的比较清爽的一个Javascript VM的环境,调用script->Run()就能虚拟运行Javascript了
下面是运行后的效果,恩!clsid已经连接起来了。WOW!!!
再看点火力猛点的网页木马,下面这个就是个N多杀软不能检测的例子(不全)。
 
下面我们让这个Javascript虚拟执行一下,明文出来了:
下面这张图显示的是Shellcode
接下来这张很明显的可以看出,是ms09-002的网马
到此完毕。
 
后面一段时间将花业余的时间做内存审计和统计相关的工作,尽力完善它。


[本日志由 friddy 于 2009-03-20 10:13 AM 编辑]
文章来自: 本站原创
引用通告: 查看所有引用 | 我要引用此文章
Tags: Javascript 虚拟执行引擎
评论: 22 | 引用: 0 | 查看次数: 7888
回复回复Polly[2017-03-19 01:55 PM | del]
Spot on with this write-up, I truly believe that this amazing site needs a great deal more attention. I'll probably be back again to read more, thanks for the info!
回复回复Ashly[2017-01-24 01:52 AM | del]
Bialetti Cookware Gives You Easy Professional-Quality Cooking Items - You might have encountered countless cookware brands that will you've been purchasing -- and throwing out for the nth time revere ware cookware.
: Could you tell homeowners how many pieces and what types are in the Jamie Oliver boxed set please. These sets are a popular choice in many households.
回复回复Karla[2016-09-23 10:15 PM | del]
You've gotten one of the better internet sites.
回复回复Della[2016-03-10 10:43 AM | del]
Much thanks! This is definitely an impressive internet site!
回复回复Manual[2015-09-13 11:53 PM | del]
It is wise decision to invest in the services of a professional graphic and website development company to make a fantastic website- just the way you want- the very first time.

From the pictures that support the content to the call to action button that directs user to the contact page or provides contact details for immediate discussion about their projects. This catchy and attractive design can be made by graphic design.
回复回复Maricela[2015-08-27 02:46 PM | del]
Thanks, this site is really useful.
回复回复Aidan[2015-06-07 01:48 AM | del]
Sustain the exceptional job !! Lovin' it!
回复回复Dorothy[2015-05-17 10:21 AM | del]
Lovely Website, Carry on the good job. Thanks!
回复回复Jonas[2015-04-17 10:21 AM | del]
You're a really valuable internet site; couldn't make it without ya!
回复回复Elisa[2015-04-04 05:34 PM | del]
Truly, such a beneficial online site.
发表评论
昵 称:
密 码: 游客发言不需要密码.
内 容:
验证码: 验证码
选 项:
虽然发表评论不用注册,但是为了保护您的发言权,建议您注册帐号.
字数限制 1000 字 | UBB代码 开启 | [img]标签 关闭