Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save lorishui/8d3471fef787d182c715ed9a8363ee86 to your computer and use it in GitHub Desktop.

Select an option

Save lorishui/8d3471fef787d182c715ed9a8363ee86 to your computer and use it in GitHub Desktop.
static JavaScript malware review notes

Static JavaScript Malware Review Notes

Reference: static JavaScript deobfuscation tool

Do not execute suspicious snippets just to understand them. A safer first pass is static text transformation:

  1. Decode escapes.
  2. Beautify structure.
  3. Rename obvious helper variables in your notes.
  4. Inspect strings, URLs, and dynamic execution points.
  5. Only run code later in a sandbox if absolutely necessary.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment