Page 1 of 1

Where do you go to dissect malcode scripts?

Posted: Sat May 16, 2009 10:20 pm
by luntrus
Hi users of NoScript,

There are various ways to pre-scan a site to analyze malcode script, like inline hidden iFrame, PHP holes, malicious js.script redirects, and what have you.
There is vURL:
http://vurl.mysteryfcm.co.uk <== Online
http://support.it-mate.co.uk/?mode=Prod ... topedition <== desktop edition

Read about them:
http://hphosts.blogspot.com

Then we have this online: http://www.blacklistdoctor.com/bld/diagnose.php

And we can use this: http://www.unmaskparasites.com/security-report/

What do you users use in particular?

luntrus

Re: Where do you go to dissect malcode scripts?

Posted: Sun May 17, 2009 5:43 am
by Nan M
Hi luntrus
luntrus wrote:Hi users of NoScript,

There are various ways to pre-scan a site to analyze malcode script, like inline hidden iFrame, PHP holes, malicious js.script redirects, and what have you.
There is vURL: ...
Thanks very much for taking the time to list those links!
All have been bookmarked.
I've just tried vURL and the output looks readable to a plain user.

Not impressed with the edit/control of the hphosts blog though. It left the malware accusation of NS back earlier this month (no link for obvious reasons) as "'undecided". A more firm "not proven", at a minimum, would be more just. And in that particular case, an absolute "wrong" would be fairest.
But that's web2 isn't it? A lot of junk for us to wade through.

Nice to read you again. I haven't caught up with you since the old Mozilla thread.