Other nomination

No Alnum JavaScript

Deobfuscates a symbols-only JavaScript payload found injected into Italian sites, stepping through it with alert() calls and a textarea to recover the Function() body. The recovered code rewrites every link on the page for a random one in five first-time visitors, funnelling them to a fake download site ending at a credit-card fraud checkout.

Record

Published by

extraexploit.blogspot.com

In the archive

• Nominated for the 2010 Top 10 Web Hacking Techniques

Related sources

• cheat sheet
• jjencode demo

Tags

• javascript
• encoding
• case-study
• cookie
• dom
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of extraexploit.blogspot.com, first published at the original source. Preserved copies are kept so the citation survives its host.