You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Testing on a blank file to make sure that everything works
Testing for frequent mistakes, like simplifying "foo" + "bar".decode() to "foobar".decode()
Testing that XML tags and @cc_on are stripped correctly
Testing for rewrites inside eval
Use various pieces of existing malware (that for some reason at one point or another were not emulated correctly by box-js), deactivate it (eg. replace the payload URLs with https://google.com/robots.txt), and test that they are analysed correctly
Test for samples based on codepage-437 encoding, downloading the samples from a local webserver, and verifying that the result is decoded correctly (requires one to study one such sample and "craft" a payload correctly, i.e. so that it can be decoded - obviously can't use real-life payloads)
Test for individual components - WScriptShell, XMLHTTP, etc.
The text was updated successfully, but these errors were encountered:
Some ideas:
"foo" + "bar".decode()
to"foobar".decode()
@cc_on
are stripped correctlyeval
https://google.com/robots.txt
), and test that they are analysed correctlyThe text was updated successfully, but these errors were encountered: